Legal
Privacy Policy
The short version
- You can use the free screen without giving us anything about you.
- If you subscribe, we keep your email, your plan and how you signed in. Card details go to Stripe; we never see them.
- We use one essential cookie to keep you signed in, and no advertising or tracking cookies.
- We don't sell your data. Ask us at any time to see or delete it.
1. Who is responsible
Superforest Interactive, Inc., a United States corporation operates Prexel and is the controller of your personal data. Contact us at jb@prexel.xyz about anything in this policy.
2. What we collect, and why
| When | What | Why, and legal basis |
|---|---|---|
| You visit the site or the free screen | Technical request data such as IP address, browser and pages requested, processed by Cloudflare. Aggregate visit statistics from Cloudflare Web Analytics, which uses no cookies. | To deliver and secure the Service (legitimate interests). |
| You sign in or subscribe | Email address; your Google account ID if you use Google sign-in; sign-in times; plan and subscription status; team membership. | To provide your account and subscription (contract). |
| You pay | Stripe and Link handle payment details. We receive your name, email, country, and the status and amount of your subscription, never your full card number. | To bill you and keep records the law requires (contract, legal obligation). |
| You use the app | Product events linked to your account, such as screens viewed and checkout started. | To understand and improve the product (legitimate interests). |
| You opt in to email | Your email address and your consent. | To send the daily screen email (consent, which you can withdraw at any time). |
| You contact us | Your message and email address. | To reply (legitimate interests). |
3. Cookies
We set one essential cookie, pxl_session, when you sign in, so that you stay signed in across Prexel sites. We don't use advertising, tracking or third-party analytics cookies. Because the only cookie we use is strictly necessary, we don't show a cookie banner. Cloudflare may set short-lived security cookies to protect the site from abuse.
4. Who we share it with
We don't sell your personal data or share it for advertising. We use these service providers, each only for the purpose shown:
- Cloudflare: content delivery, security, bot protection and cookieless analytics.
- OVHcloud: hosting of our servers in the European Union.
- Stripe and Link: payments, tax, fraud prevention and subscription management. Link acts as seller of record for most purchases and processes payment data under its own privacy policy.
- Resend: sending sign-in links, team invites and emails you've asked for.
- Google: only if you choose to sign in with Google.
We may also disclose data if the law requires it, or to protect our rights or the safety of others.
5. International transfers
Prexel is operated by a US company, and our servers are in the EU. Where data is transferred out of the UK or EU, we rely on adequacy decisions or standard contractual clauses with our providers.
6. How long we keep it
- Account data: while your account is open, and deleted within 30 days of your request to delete it.
- Billing records: as long as tax and accounting laws require, which can be up to 10 years.
- Server logs: up to 30 days, unless needed to investigate abuse.
7. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, to object to or restrict how we use it, and to withdraw consent. Email jb@prexel.xyz and we'll reply within 30 days. In the UK or EU you can also complain to your data protection authority. If you live in California, you have the right to know and delete your data, and we do not sell or share personal information as those terms are defined in California law.
8. Security and children
We protect data with encryption in transit, restricted access and session tokens stored only as hashes. Prexel is not meant for anyone under 18, and we don't knowingly collect their data.
9. Changes
We'll post any update here with its effective date, and email account holders about significant changes.