screenstore

Privacy Policy

Last updated: July 14, 2026

1. Who we are

This Privacy Policy explains how REDPIC GROUP SRL, registered in the Republic of Moldova at Moldova, Chisinau, Alba Iulia 192/2 of. 42 (the "controller", "we", "us"), collects, uses, and protects your personal data when you use the ScreenStore website and service (the "Service"). For any question about this policy or your data, contact us at info@redpic.md.

2. Data we collect

  • Account data: your name, email address, and password hash when you register with email, or your name, email address, and profile picture when you sign in with Google.
  • Content data: the screenshots and images you upload and the designs you create and store in the Service.
  • Technical and usage data: IP address, browser and device information, and log data about how the Service is used, collected to operate and secure it.
  • Payment data: payments are processed by licensed third-party payment providers. Your card details are transmitted directly to the provider and never reach or are stored on our servers; we receive only a confirmation of the transaction and its basic details.

3. Purposes and legal bases

We process your data:

  • to provide the Service, maintain your account, store your designs, and process your purchases — performance of a contract;
  • to secure the Service, prevent abuse, and diagnose technical problems — our legitimate interest in operating the Service safely;
  • to measure how the Service is used and improve it — our legitimate interest, as described in section 5;
  • to respond to your support requests — performance of a contract and our legitimate interest;
  • to comply with accounting, tax, and other legal obligations — legal obligation;
  • for any purpose based on consent, only after you have given it, and you may withdraw consent at any time.

We do not use your data for automated decision-making or profiling.

4. Cookies and local storage

By default the Service uses only essential cookies: session cookies that keep you signed in and secure the sign-in flow. Preferences such as your light or dark theme and your cookie choice are stored in the local storage of your browser, not in cookies. Our own analytics software stores nothing on your device. Advertising and cross-site tracking cookies are never set unless you enable the optional categories described below.

When you first visit, a cookie banner lets you accept, reject, or customize optional analytics and marketing cookies. Enabling either category loads Google Tag Manager and the measurement or advertising tags configured in it, which may set cookies; until you enable one of them, Google Tag Manager is never requested and no such cookie is set. Your choice is stored in your browser and requested again after 12 months or when our cookie practices change. You can change it at any time via the "Cookie settings" link in the footer, and withdrawing your consent is as easy as giving it. You can also delete cookies in your browser settings, but the Service will not function properly without the session cookie.

5. Product analytics

We measure how the Service is used so we can improve it. This baseline measurement runs on analytics software we host ourselves on our own infrastructure, and its data is not shared with an external analytics vendor. It sets no cookies and builds no cross-site profile: it records page views and product events such as opening the editor, applying a template, or exporting a set, together with coarse technical details like device type, browser, and country. It never records the content of your designs or the screenshots you upload.

When you are signed in, these events are linked to the opaque identifier of your account so we can understand how the Service works over a whole account rather than a single visit. That identifier is not your email or your name, and we do not use it to build a profile of you or to make automated decisions. Because this measurement is limited, first-party, and necessary to operate and improve the Service, we rely on our legitimate interest — and you can object at any time using the contact details below.

If, and only if, you enable the optional analytics or marketing category in the cookie banner, we additionally load Google Tag Manager, which loads the measurement and advertising tags we have configured in it. Those tags are provided by Google and may set cookies and transfer data to Google, including outside your country. We signal your exact choice to Google using consent mode, so tags in a category you did not enable stay switched off. The legal basis here is your consent, which you can withdraw at any time via the "Cookie settings" link in the footer.

6. Third parties who process data

We share personal data only with service providers that help us run the Service: payment providers that process your transactions, Google when you choose to sign in with a Google account, Google Tag Manager and the Google advertising and measurement services it loads if you consent to the optional cookie categories, and infrastructure providers that host the Service and store its data. The Service also loads fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com); when your browser requests these fonts, Google receives your IP address as a technical necessity. This font delivery is strictly necessary for rendering designs correctly. Each provider processes data under an agreement that restricts use to the purposes above. We do not sell personal data, and we disclose it to authorities only where the law requires it.

7. Data retention

We keep your account and content data for as long as your account exists. When you delete your account, or ask us to, we delete your personal data within 30 days, except data we must keep longer to meet legal obligations (such as accounting records for completed purchases) or to resolve disputes; that data is kept only as long as those obligations require. Technical logs are retained for up to 12 months.

8. Your rights

Under applicable data protection law you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to processing;
  • receive your data in a portable format;
  • withdraw consent at any time, where processing is based on it.

To exercise any of these rights, write to info@redpic.md; we respond within one month. You also have the right to lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md) or with your local supervisory authority.

9. International transfers

Some of our service providers may store or process data outside the Republic of Moldova or the European Economic Area. Where that happens, we rely on safeguards recognized by applicable law, such as adequacy decisions or standard contractual clauses, so that your data receives an equivalent level of protection.

10. Security

All traffic between your browser and the Service is encrypted with TLS. Access to personal data is restricted to personnel who need it to operate the Service, passwords are stored only as cryptographic hashes, and card data never touches our infrastructure. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the supervisory authority as required by law.

11. Children

The Service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The current version, with its effective date, is always available on this page, and we will give notice through the Service or by email before material changes take effect.

13. Contact

REDPIC GROUP SRL, Moldova, Chisinau, Alba Iulia 192/2 of. 42. Email: info@redpic.md. Phone: +373 69 190 168.