Last updated: 17 June 2026
This policy explains what personal data Alosha collects, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR).
We keep data collection to the minimum needed to run our website and products. We do not sell personal data, and we do not use it for advertising.
1. Who we are
The data controller is [Legal name], operating as Alosha ("Alosha", "we", "us"), based in the Netherlands. [KvK number: to be added] · [VAT/BTW number: to be added]
For any privacy question or request, contact us at hello@alosha.dev.
2. What data we collect
We collect personal data only in specific, limited situations:
- When you use the contact form: your name, email address, the topic and product you select, and your message. For spam prevention and security we also record the submission's IP address and browser user-agent.
- When you create a PixSqueeze account: your email address and authentication details, handled by our authentication provider, plus any API usage data needed to operate the service.
- When you pay for a paid plan: billing is handled by our payment processor. We receive limited details (such as your plan, billing status and the last four digits of a card) but never your full card number.
- When you visit the site: aggregated, privacy-friendly analytics that do not use cookies and do not identify you individually.
3. Why we use it, and our legal basis
- To answer your enquiries sent through the contact form — on the basis of our legitimate interest in responding to you, and to take steps at your request.
- To provide and secure our products (accounts, API access, fraud and abuse prevention) — to perform our contract with you and pursue our legitimate interest in keeping the service secure.
- To process payments and meet legal obligations such as tax and accounting — to perform our contract and comply with the law.
- To understand and improve the site through aggregated analytics — on the basis of our legitimate interest in a well-functioning website.
4. Service providers we share data with
We use a small number of trusted processors to run the site and products. They only process data on our instructions:
- Vercel — website and application hosting, and cookieless analytics.
- Cloudflare — DNS, security and email routing for our domains.
- Supabase — database and authentication (account data and a backup copy of contact-form messages).
- Resend — delivery of contact-form messages and transactional email.
- Stripe — payment processing for paid PixSqueeze plans.
Where a provider processes data outside the European Economic Area, that transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses.
5. How long we keep it
We retain personal data only as long as needed for the purpose it was collected, or as required by law. Contact-form messages are kept while relevant to our correspondence and then deleted; account data is kept for the life of your account; and billing records are kept for the period required by Dutch tax law.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected, or incomplete data completed;
- have your data erased, where there is no overriding reason to keep it;
- restrict or object to certain processing;
- receive your data in a portable format; and
- withdraw consent at any time, where processing is based on consent.
To exercise any of these, email hello@alosha.dev. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Cookies
Our marketing site does not set advertising or tracking cookies, and our analytics are cookieless. Strictly necessary cookies may be used to keep you signed in to a PixSqueeze account; these are required for the service to function.
8. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "last updated" date above, and significant changes will be communicated where appropriate.