Privacy Policy
This Privacy Policy explains how Pickmythumb (“Pickmythumb”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards your information when you visit pickmythumb.com and use our thumbnail‑testing service (the “Service”). Please read it carefully. By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.
1. Who we are & how to contact us
Pickmythumb is the controller responsible for your personal data. If you have any questions about this Policy or wish to exercise your privacy rights, contact us at pickmythumb.com/contact or by email at privacy@pickmythumb.com.
2. Information we collect
We collect only what we need to operate the Service.
2.1 Information you provide
- Account information (via Google Sign‑In). When you sign in with Google, we receive your Google account identifier, name, email address, and profile picture URL. We do not receive your Google password.
- Content you upload. Thumbnail images, video titles, and test names that you create or upload.
- Voting input. If you participate in a test as a voter, the display name you enter, the choices you make (selections, rankings, click order, or 1–10 ratings), and any optional comments you submit.
- Communications. Information you provide when you contact us (for example, your name, email, and message), used to respond to and resolve your request.
2.2 Information collected automatically
- Technical & log data. Your IP address, browser type and settings, device and operating system information, referring pages, and the dates/times of your requests. We use this for security, abuse prevention, and to operate and debug the Service.
- Cookies & local storage. See “Cookies and similar technologies” below.
We do not intentionally collect special categories of personal data (such as health, biometric, or political data), and we ask that you not upload such data. We do not knowingly process payment card data (the Service is currently free).
3. How we use your information
- To provide, maintain, and operate the Service (create tests, host images, collect votes, and display results to the test creator).
- To authenticate you and keep your session secure.
- To communicate with you, including responding to support requests and sending service‑related notices.
- To protect the Service and our users — detecting, preventing, and addressing fraud, abuse, security incidents, and technical issues.
- To comply with legal obligations and enforce our Terms.
4. Legal bases for processing (EEA/UK)
If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:
- Performance of a contract — to provide the Service you request (Art. 6(1)(b) GDPR).
- Legitimate interests — to secure, improve, and operate the Service and prevent abuse, balanced against your rights (Art. 6(1)(f)).
- Consent — where required, for example for non‑essential cookies; you may withdraw consent at any time (Art. 6(1)(a)).
- Legal obligation — where we must process data to comply with the law (Art. 6(1)(c)).
5. Cookies and similar technologies
We use a minimal set of cookies and browser storage, and we do not use third‑party advertising or cross‑site tracking cookies.
- Strictly necessary cookies. A session cookie (
pmt_session) keeps you signed in, and short‑lived cookies support the secure sign‑in flow. These are required for the Service to function and do not require consent. - Local storage. We store small items in your browser (for example, your in‑progress voting state and your cookie‑notice preference) to make the Service work smoothly. This information stays on your device.
Because we rely only on strictly necessary cookies and functional local storage, most users will not need to take any action. Where consent is required by local law, we present a notice and record your choice. You can also control cookies through your browser settings; blocking strictly necessary cookies may prevent you from signing in.
6. How we share information
We do not sell your personal data and we do not share it for cross‑context behavioral advertising. We share information only as described below:
- Test results. Voting input you submit as a voter (including your display name and any comments) is shown to the creator of that test. Do not include information you wish to keep private.
- Service providers (processors) who help us run the Service under contract, including: Google (authentication), Amazon Web Services (hosting and storage), Postmark / ActiveCampaign (transactional email), and Let’s Encrypt (TLS certificates). These providers may process data only on our instructions.
- Legal & safety. When required by law, legal process, or to protect the rights, property, or safety of Pickmythumb, our users, or the public.
- Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
7. International data transfers
We host the Service in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where we or our providers operate. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses for such transfers.
8. Data retention
- Tests and their content are automatically deleted approximately 30 days after creation, including the images and votes associated with them.
- Account information is retained while your account is active and deleted on account deletion (see your rights below), subject to legal retention needs.
- Backups are kept for a limited rolling period and then overwritten.
- Support communications are kept as long as needed to handle your request and for our records.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you, and request a copy.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict or object to certain processing.
- Data portability.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local data protection authority.
California residents (CCPA/CPRA). You have the right to know, access, correct, and delete your personal information, and to not be discriminated against for exercising these rights. We do not “sell” or “share” personal information as those terms are defined under California law.
To exercise any right, contact us at pickmythumb.com/contact. We will verify your request and respond within the time required by applicable law. You may also delete your tests at any time from your dashboard.
10. Security
We use technical and organizational measures designed to protect your information, including encryption in transit (HTTPS/TLS), access controls, and least‑privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Children’s privacy
The Service is not directed to children and is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us and we will delete it.
12. Third‑party links
The Service may link to third‑party websites or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Review their policies before providing information.
13. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
14. Contact
Questions, requests, or concerns? Reach us at pickmythumb.com/contact or privacy@pickmythumb.com.
This document is provided for transparency and general information and does not constitute legal advice.