Privacy Policy

Your files and browser storage

The editor opens, edits and saves image files on your device. Lil Cactus does not include image pixels, filenames, document text or embedded image metadata in its analytics events.

Browser storage holds preferences, recent-file references, cached resources and recovery copies. Inactive recovery copies may be removed automatically after seven days, but copies can remain between visits or while in use. You can remove them through the editor or clear this site's browser storage. Keep separate copies of important work.

Website operation and enquiries

Website requests disclose your IP address and technical connection information to the services used to host, deliver and protect the site. We use this information for service delivery, security and preventing abuse, relying on our legitimate interests in operating and protecting Lil Cactus.

If you contact us, we use your contact details and message to answer your enquiry through email services. We rely on our legitimate interests in handling enquiries and resolving problems.

Contacting us is optional, but we need enough information to respond.

We retain correspondence and operational records for as long as needed for those purposes, related disputes and applicable legal obligations.

Statistics

We use Google Analytics 4 and PostHog to understand visits and editing activity. Their data includes browser identifiers, browser and device information, IP addresses received with requests, referral and campaign information, and selected editing actions. These events describe use of the editor, not document content.

We ask before enabling statistics in the EEA, UK, Switzerland, Canada and relevant associated territories. Elsewhere, statistics start unless you have opted out or your browser sends a Global Privacy Control or Do Not Track signal. If we cannot determine the connection country, we ask first.

We rely on consent where we ask for permission, and on our legitimate interest in understanding and improving the editor where statistics start without a prompt. You can change your choice in Privacy and cookie settings. Refusing statistics does not restrict editing. A saved choice is applied for 180 days.

Google Analytics uses _ga cookies, set for up to two years and renewable when you return. PostHog uses local storage, which has no automatic expiry. Turning statistics off removes these analytics identifiers from this browser and stops further event capture. It does not automatically erase information already collected.

PostHog retains event data for up to one year. Google Analytics is configured for two months of event data and 14 months of user data, with the user-data period restarting on further activity. Aggregate reports may be kept longer.

Advertising

Lil Cactus may display advertising to fund the editor. When advertising is enabled, we use Google's advertising services, including Google Ad Manager and AdSense, and may use other advertising partners identified in Privacy and cookie settings.

When advertising is enabled, Google and other advertising partners use cookies and similar technologies to select, deliver and measure advertisements and prevent advertising fraud. Information they receive can include IP addresses, browser and device information, cookie or device identifiers, approximate location and advertising interactions. Advertising cookies can enable personalised advertisements based on visits to Lil Cactus and other websites.

For our advertising-related processing, we rely on consent where required and on legitimate interests in funding and protecting the service where permitted. The consent settings identify partners, their purposes and the choices available to you. Google and some advertising partners process information as independent controllers under their own privacy notices.

When advertising is enabled, you can change your advertising choices in Privacy and cookie settings, where partner details, privacy notices and advertising-cookie durations are available. You can also manage Google's personalised advertising through My Ad Centre. See how Google uses information from sites and apps that use its services.

If you refuse consent, we may still show ads that can be served without that consent. Refusing advertising consent does not restrict editing.

International transfers

Personal data may be processed in countries other than the one where you live, including the UK, countries in the EEA and the United States. Where international-transfer safeguards are required, we rely on applicable adequacy decisions, including the EU-U.S. Data Privacy Framework and its UK Extension for covered transfers to certified US recipients, or approved standard contractual clauses with the required UK terms where applicable.

You can request information about the relevant transfer safeguards, including a copy where applicable, at support@lilcactus.app.

Your rights

Depending on the law and processing involved, you can request access, correction, deletion or a copy of your personal data, or restriction of its use. Contact support@lilcactus.app. We may need information to identify the relevant records and verify your request.

You can object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it through the relevant privacy settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

You can raise a privacy complaint with us at support@lilcactus.app. You can also complain to the relevant data protection authority, including your local data protection authority where applicable. For UK matters, you can contact the Information Commissioner's Office.

Contact

Lil Cactus is operated by Sergii Bondarenko, who is the controller of the personal data described in this notice. Contact support@lilcactus.app.