Privacy Policy

Who is responsible

Lil Cactus is operated by Sergii Bondarenko, an individual. He is responsible for the personal data described here. Contact: [email protected].

Your images and browser storage

The editor opens, processes and saves images on your device. Image pixels, filenames, document text and embedded image metadata are not sent to our servers or analytics services.

Essential browser storage keeps your preferences and recovery copies of unsaved work. These stay in your browser until replaced, deleted through the editor or cleared in your browser settings. Keep your own copies of important work.

Visits and tool use

We use Google Analytics 4 to understand traffic sources and visits, and PostHog to understand selected editing actions. These services receive random browser identifiers, browser and device information, the referring website, permitted campaign tags and actions such as opening a document, selecting a tool or saving an export. We send tool and filter identifiers, file format, bit depth and save outcomes, but not your content or filter settings.

There are no session recordings, automatic click recordings, heatmaps or analytics error reports. We do not connect analytics identifiers to an account or use analytics for personalised advertising. We do not sell personal data or make decisions about you using automated profiling.

Your statistics choice

In the EU/EEA, the UK, Switzerland, Canada and relevant associated territories, statistics start only after you choose to allow them. Elsewhere, statistics start by default unless you have refused or your browser sends a Global Privacy Control or Do Not Track signal. If we cannot determine the connection country, we ask first. This country check uses the connection, so a VPN can change the result.

Open Privacy and cookie settings in the editor to change your choice. Refusing statistics does not restrict editing. The preference lasts 180 days. Turning statistics off stops future collection and removes analytics identifiers from this browser. Data already collected is not automatically deleted, and an event captured before withdrawal may finish sending afterwards.

We rely on consent where we ask for permission, and on our legitimate interest in understanding and improving the editor where statistics are enabled without a prompt. You can object or withdraw your choice through the settings.

Cookies, identifiers and retention

Google Analytics uses _ga cookies to recognise your browser. Their standard lifetime is up to two years and can refresh when you return. PostHog keeps its browser identifier in local storage, which has no automatic expiry. You can remove these by turning statistics off or clearing this site's browser storage.

PostHog's current free plan retains event data for up to one year. Google Analytics is configured to retain event data for two months and user data for 14 months. Returning activity resets the user-data retention period. Aggregate statistical reports may be kept longer. See Google's retention information for how its event and aggregate reports differ.

No advertising cookies are currently used. The current deployment does not offer account creation or process payments.

Hosting and service providers

OVHcloud hosts the website and Cloudflare delivers and protects it. Website requests necessarily disclose your IP address and technical connection information to these providers. They may keep operational and security records under their service policies. We use this processing to deliver the editor and protect it against abuse.

When statistics are enabled, requests also disclose your IP address to Google and PostHog. Google says GA4 uses IP addresses to determine approximate location, then discards them before logging analytics data. We use PostHog's EU cloud. Providers may process information internationally, including outside your country. Their processing terms describe the applicable contractual transfer safeguards.

Provider information: OVHcloud, Cloudflare, Google and PostHog.

Contacting us and your rights

If you contact us, we use your email address and message to answer your enquiry and resolve the issue. We keep correspondence for as long as needed to handle it and any related follow-up or legal obligation. Please avoid sending images or sensitive information unless it is necessary for your enquiry.

Depending on the law that applies to you, you can request access, correction, deletion or a copy of your personal data, restrict its use, or object to its processing. Write to [email protected]. We may need enough information to locate the relevant browser records and verify your request. You can complain to your local data protection authority, including the UK Information Commissioner's Office.

Updates

We will update this notice when the service or its data use changes. The date above identifies this version. New account, payment or advertising services will need updated information before they are introduced.