Privacybeleid

Last updated: February 2026

1. Introduction

SmallPict respects your privacy and is committed to protecting your personal data.

2. Data We Collect

We collect the following types of information:

  • Account Information: Email address and website URL when you activate the plugin.
  • Usage Data: Number of images processed, file sizes, and optimization statistics.
  • Technical Data: WordPress version, PHP version, and plugin version.
3. Image Processing & Storage

We do NOT store your images. When you upload an image:

  • Your image is temporarily processed in our secure cloud.
  • The optimized image is immediately sent back to your WordPress.
  • Both versions are deleted from our servers within minutes.
  • We do not keep any copies of your images.
4. Data Security

We implement industry-standard security measures including HTTPS/TLS encryption.

5. Your Rights

You have the right to access, correct, or delete your personal data. Contact: privacy@tuxnoob.com

6. Contact Us

For questions about this Privacy Policy: privacy@tuxnoob.com

Legal Basis for Processing

We process your personal data under the following legal bases: performance of a contract (account creation, billing, and service delivery), legitimate interest (fraud prevention, service analytics, and security monitoring), and consent (marketing communications, which you may withdraw at any time). Where Indonesian law applies, processing is likewise based on your consent, contractual necessity, or our legitimate interest as data controller under UU PDP No. 27/2022.

Your Rights Under Indonesian Law

If you are located in Indonesia, in addition to the rights described elsewhere in this Policy, UU PDP No. 27/2022 grants you the right to: obtain information about the clarity of identity, legal basis, purpose, and accountability for the processing of your personal data; complete, update, or correct errors in your personal data; access and obtain a copy of your personal data; terminate the processing, delete, and/or destroy your personal data; withdraw your consent; object to automated individual decision-making, including profiling; and request compensation for violations of the processing of your personal data in accordance with applicable law. To exercise any of these rights, contact us at privacy@tuxnoob.com.

Data Breach Notification

If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected users without undue delay. For users protected under UU PDP No. 27/2022, this notification will occur within 3x24 (seventy-two) hours of us becoming aware of the breach, as required by Indonesian law. For users protected under GDPR, we will notify the competent supervisory authority within 72 hours of becoming aware of the breach, and will notify affected individuals directly where the breach is likely to result in a high risk to their rights and freedoms.

Cross-Border Data Transfer

SmallPict's infrastructure, including cloud compute, storage, and content delivery services, may process your data in countries other than your own. Where we transfer personal data of EU/EEA users outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses. Where we transfer personal data of Indonesian users outside Indonesia, we do so in accordance with Article 56 of UU PDP No. 27/2022, ensuring the receiving country provides an equivalent or higher level of personal data protection, or that appropriate binding safeguards are in place.

Data Retention

We retain your account data, uploaded images, and backups for as long as your account remains active. If you close or cancel your account, we retain your data for 7 days to allow for account recovery, after which it is permanently deleted from our production systems, subject to any legal obligation to retain certain records longer (e.g., billing records for tax purposes).

Children's Data

SmallPict is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18 (or the age of majority in your jurisdiction, if different). If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take steps to delete that data promptly.

Data Protection Contact

For any questions, requests, or complaints regarding this Privacy Policy or our data processing practices, contact us at privacy@tuxnoob.com.