This notice describes the Pictelvo website image and Cloud video workflows. It does not describe a released Android app.
Public operator identification has not been supplied in the website settings.
Your photo and edits
Image composition takes place in your browser. The free PNG request sends metadata, not your photo or the completed PNG file, to the Pictelvo export endpoint. Your selected photo, its preview and editing settings can be saved in this browser using IndexedDB and temporary session storage so you can continue editing. Avoid personal photos on a shared device.
Video processing
For a video download, your selected photo and editing instructions are sent through our WordPress service to the connected Google Cloud renderer. The renderer fetches the template video, combines your photo and animation, and places a temporary MP4 in private Cloud storage. A short-lived signed link lets your browser request that file directly. A successful request does not prove the device saved it. Photos and temporary outputs are not public catalogue items.
Browser preferences
Local storage can contain your anonymous session token, favourites, template details, a religion or audience preference selected for discovery, photo update markers and pending download request details. Session storage remembers browsing position and temporary editing information. These values are not a public account.
Anonymous server records
To authorize guest requests and limit abuse, the website stores a random session token, hashed IP address and browser user-agent values, creation and expiry times, and request state. A hash is an identifier, not a guarantee of anonymity. Likes, template selections, counters and diagnostic events can also be recorded for operating the website.
Image download request metadata
The server records the guest session reference, random request and export identifiers, template and language, image dimensions, a SHA-256 fingerprint of the proposed PNG, status and times. The fingerprint is not the image file. A retry record helps avoid creating a second authorization for the same request.
Expiry and retention
The default anonymous access period is seven days; a configured period can differ. Image request recovery is limited to the session expiry and at most 24 hours. Access expiry does not delete a database row. Server session, like, log and image export metadata records do not all have an automatic deletion schedule. Cloud video recovery lasts at most 24 hours and can be shorter if the guest session expires. Scheduled Cloud maintenance removes expired photo/request/output objects after active render leases end; deletion can be delayed by a maintenance or storage failure and is retried. Cloud job identity tombstones can remain for seven days after expiry. Video request records in WordPress are eligible for bounded pruning seven days after their recovery period. Technical hosting and Cloud logs have separate retention settings. Browser photos and favourites can remain until you remove this website’s stored data; a two-hour editing restore limit does not guarantee the underlying stored value has been erased.
Hosting and third parties
Our hosting provider and any enabled security, cache or network service may process IP addresses, request URLs and technical logs to serve and protect the website. Their actual configuration and retention periods require operator review. Links or a share action you choose can open another service with its own privacy practices. This notice does not claim that advertising or analytics is active; any future addition needs a separate configuration and notice review.
Your choices and requests
You can stop editing, remove this site’s browser storage, or contact the operator about information held on the server. Clearing your browser does not erase server records. A server request may require limited verification; do not email your guest token. Read Data choices for browser instructions.
Children and other people’s photos
Only use photos you have the right and permission to use. Do not submit sensitive information. A parent or guardian should supervise a child’s use where appropriate; the operator must review applicable child privacy requirements.
Questions
Website support, privacy questions and content reports: contact@pictelvo.com.
Send the page or template URL and a short description. Do not send passwords, guest access tokens, payment credentials or identity documents with your first message.