Privacy notice

Last updated: 2026-10-27 · Version 3.3.7 · Courtesy translation: the Spanish version prevails.

Pixthon runs every calculation in your browser. The content of your quotes (project, client, services, quantities and amounts) is never sent to or stored on any server. The site only keeps an anonymous count of how many quotes are made and how many files are exported.

The calculator does not require an account. If you choose to create an optional account (to post projects or apply), the account data described below is processed only to provide and protect that service.

01Data controller

E. K. Shiraki, an individual, is responsible for the personal data described here under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, published 20 March 2025), its Regulations and the Privacy Notice Guidelines where consistent with it.

Privacy contact, including rights requests and notices: contacto@pixthon.mx. Address for legal notices: Calle Hogar del Gozo 402-3, Hogares de Atizapán, C.P. 52910, Atizapán de Zaragoza, Estado de México, México. Email is the fastest way for any privacy request.

02Personal data processed

Feedback from the site	If you use "Send feedback": the type (bug, idea, rate or other), your message, the language and the Pixthon version. If you are signed in, also which account sent it. Your email is not requested.
Emails you send	If you write to give feedback, report a bug, donate or exercise your rights: your email address, your name if included, and the message.
Account (optional)	Your name or studio name; your email and, if you add them, up to two more emails; your password, which is never stored: only an irreversible hash (Argon2id). If you sign in with Google: your Google account identifier, your name and your verified email (your Google password is never received). If you turn on two-step verification: your authenticator app secret, stored encrypted, and hashes of your backup codes. The date you accepted this notice and the terms.
Project board (optional)	If you post or apply: your board profile (specialty, description, services, city, whether you work remotely, portfolio links, available hours and whether you hire as an individual, freelancer or company); your projects (title, description, budget, dates and, if you choose, a payment plan and the calculator setup); your applications (amount, message and, if you attach it, your quote summary); the record of when contact details were shared; and, if you answer it, your closing survey (ratings, whether you would work with the other party again, a 0–10 recommendation, the final amount if you give it and a comment). Reports you file or that are filed about your account (reason, what is described, how it was resolved) and your accumulated notices. Your contact phone and email are stored encrypted.
Account security	For each session and sign-in: date and time, browser and system type (e.g. “Chrome · Windows”) and approximate network (your IP address with its last block set to zero, which does not identify a specific device). Also a log of the emails the system sends you (type, recipient, date and whether it was delivered).
Server logs	The hosting provider automatically logs IP address, date and time, requested page and browser type, like any website. Used only to run and protect the site.

No sensitive data is processed. No financial data is collected: donations made through an external platform (e.g. PayPal, Mercado Pago or Ko-fi) are handled by that platform under its own privacy notice.

03Purposes

Replying to your emails: feedback, bug reports, rate suggestions, donations and rights requests.
Reading the feedback you leave on the site and in closing surveys to fix bugs, update rates and improve Pixthon.
Running the site, detecting faults and protecting it from abuse (server logs).
If you create an account: creating and managing it, confirming it is you when you sign in, sending you the necessary emails (confirm your email, reset your password, security notices such as a new sign-in) and protecting your account from unauthorized access (attempt limits, notices and two-step verification).

If you use the board: showing your projects and professional profile to board visitors or to whoever receives your application (without your contact details); emailing you about applications, selections, counteroffers and closings; calculating your workload and availability; reviewing posts to prevent fraud; and, when you and the other party accept to work together, sharing your name, contact phone and email with them so you can coordinate.
With closing surveys: producing aggregate statistics (averages over several cases, identifying no one) to review the reference rates.
With reports: reviewing possible fraud or breaches, giving notices and, where appropriate, suspending accounts to protect other people.

There are no secondary purposes: no marketing, advertising, profiling, automated decisions or sale of data.

04What is not collected

Quotes: everything you enter stays on your device. PDF, Excel and XML files are generated in your browser.
Quote counter: when you build a quote and leave it on screen for a few seconds, the browser tells the server once per tab, along with the mode you were in (quote, hire or budget); on export, it sends the file type (PDF, Excel or XML). The server only adds one to each total. No IP, names, amounts or identifying data are stored. To avoid counting twice, the tab keeps a marker in your browser (sessionStorage) that is cleared when you close it.
Your quotes do not go to your account: even with an account, what you calculate stays on your device. The account only keeps the data listed above.
No tracking: no analytics, advertising or profiling. The feedback form stores only what you write; if it cannot be stored, it opens your own email app.

By emailing us you tacitly consent to the processing described in order to reply (LFPDPPP art. 7). To create an account you must expressly accept this notice and the terms (checkbox when signing up or when finishing sign-up with Google); the date and version you accepted are stored. You may revoke consent at any time through the rights procedure below; revocation is not retroactive.

06Local storage and cookies

Only if you use your account, these strictly necessary technical cookies are used (no advertising or third-party cookies): px_sesion keeps you signed in (while the browser is open, or 30 days with “Remember me”; deleted when you sign out); px_disp, a random identifier of your browser used to email you when someone signs in from a new one (up to 400 days); and px_oauth, only during “Continue with Google” (10 minutes), to check that Google’s reply is the one you requested.

The calculator uses no cookies, analytics, ads or social widgets. Fonts are served from the same domain. Your browser’s localStorage keeps, for convenience only and never sent to the server:

pixthon.preparadoPor: your name or studio, only if you typed it.
pixthon.idioma and pixthon.moneda: preferred language and currency.

While the tab is open, the quote in progress is kept in session storage (pixthon.borrador) so it isn’t lost if you reload or come back from these pages. It is deleted when you close the tab and never leaves your device.

You can delete them anytime from your browser settings.

Your logo for the PDF: if you upload it, the image is read and used only in your browser while the page is open. It is not sent to the server or stored; after a reload you upload it again.

07Exchange rate

To show USD amounts, the Pixthon server fetches Banco de México’s FIX rate (via Frankfurter) and caches it for a few hours. Your browser does not contact those providers and none of your data is sent to them.

08Processors and transfers

The hosting provider (IONOS) and the email provider process data on the controller’s behalf only to provide their service; their servers may be outside Mexico. Sharing data with a processor is not a transfer under the law (LFPDPPP art. 2, sections XII and XX), so it does not require your consent. If you have an account, your data is stored in a database at the same hosting provider (IONOS) and account emails are sent through its email service, both as processors. Continue with Google is optional: if you choose it, Google (Google LLC) confirms your identity and asks your permission to share your name, email and an account identifier with Pixthon; you start that exchange and it is also governed by Google’s privacy policy. When you create or change a password, the server checks the public Have I Been Pwned service for breaches, sending only the first 5 characters of a hash of the password, which neither reveals it nor identifies you. Board: what you post on the board (project and display name) is visible to any visitor, and your professional profile is seen by whoever receives your application. Your contact phone and email are only disclosed to the other party of a project when both accept to work together; you start it by accepting, to fulfil the relationship you request, and the time it happened is recorded. People who help administer: the controller may authorize other people to moderate the board and handle reports; they only see what that task needs, act on the controller’s instructions with two-step verification on, and every action is logged. No personal data is transferred to third parties, except where the law allows it without consent, such as a request from a competent authority.

09Third-party data you enter

Data about other people that you type into a quote (e.g. your client’s name) stays on your device and in your files; Pixthon does not receive it. You are responsible for having a lawful basis to use it.

10Minors

The service is not aimed at people under 18. Minors should contact us through a parent or guardian.

11Retention and security

Emails are kept while your request is handled and up to twelve months afterwards, unless the law requires otherwise. Server logs are kept as defined by the hosting provider. The site runs over HTTPS only, with security headers.

If a security breach significantly affected your property or moral rights, you would be informed immediately by email so you can take action (LFPDPPP art. 19). Account: its data is kept while the account exists. When you delete it (My account → Delete my account), your profile, emails, sessions, security records, codes and the log of emails sent to your addresses are erased immediately; only the final confirmation email remains in your own inbox. Board: your projects, applications and surveys are kept while your account exists so both parties keep the history; deleting your account erases them together with your board profile. Averages already calculated cannot identify you. Sessions expire on their own and one-time links are erased 7 days after they expire. Security: Argon2id password hashes, encrypted two-step secrets, links and sessions stored only as hashes, secure cookies, attempt limits and email notices for important changes.

12ARCO rights and revoking consent

You may access, rectify, cancel or object to the processing of your data, and revoke consent, by writing to %VITE_CORREO% with: your name and address or any other means to receive notices; documents proving your identity (or your representative’s identity and authority); a clear and precise description of the data involved (not needed for access); the right you want to exercise or what you request (for rectification, the corrections and supporting documents, art. 30); and any other document that helps locate the data (art. 28).

If you have an account you can also do it yourself: My account shows your data, emails and sessions, lets you change your password and emails, and Delete my account exercises cancellation immediately.

You will get an answer within 20 days; if granted, it takes effect within the following 15 days. Each period may be extended once when justified (art. 31). The procedure is free (art. 34).

13Limiting use or disclosure

You may ask by email that your messages are not kept after we reply, avoid entering your name in the calculator, use it without an account, clear local storage at any time and, if you have an account, end sessions or delete it from My account.

14Authority

If you believe your data protection rights were violated, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno.

15Changes and language

Changes will be published on this page with their date. This English text is a courtesy translation; the Spanish version prevails.