Privacy Policy
Last updated: 7 November 2026
Who we are
Points (vi2lab.com) is run by [OPERATOR NAME], an individual. Contact: [CONTACT EMAIL].
What we collect and why
| Data | Why | How long |
|---|---|---|
| Email address | Your account: sign-in codes, receipts, answers to support and refund requests | Until you delete your account |
| Name and Google account id (if you sign in with Google) | Linking your Google sign-in to your account | Until you delete your account |
| Purchases: pack, amount, date, payment reference | Credits, refunds, accounting, disputes | As long as accounting and payment-provider rules require, even after account deletion |
| Credit history: renders started / finished / failed, resolution, length, encoder statistics, and for failed renders your browser and device type | Charging and returning credits, preventing abuse, fixing rendering problems on specific devices | Until you delete your account (then kept without your email) |
| Session cookie | Keeping you signed in (60 days) | Until you sign out or it expires |
| IP address | Rate limits against spam and abuse of sign-in emails | Short-lived counters only |
| Product events without personal data (e.g. "a demo was rendered") | Understanding which steps people use | Up to 2 years |
We don't sell your data, and we don't use advertising or tracking cookies. The only cookie is the one that keeps you signed in, which is strictly necessary — that's why there is no cookie banner.
Services we use
- Cloudflare — hosting, database, bot protection (Turnstile) and cookie-less traffic statistics.
- Google — only if you choose "Sign in with Google".
- PayPal — payments. Card and PayPal details are entered on PayPal's side; we never see them.
- [EMAIL SERVICE, e.g. Resend] — sending sign-in codes and receipts.
- [CRYPTO GATEWAY] — only if you pay with cryptocurrency.
- Google Fonts — the fonts of the editor and of text layers are loaded from Google.
These providers process data on our behalf and may store it outside your country.
Your rights
You can see your purchases in your account, and delete the account yourself (Account → Delete account): your email, name and sign-in are removed; purchase records stay without them where the law or the payment provider requires it. For a copy of your data or any other request, write to [CONTACT EMAIL]. If you are in the EU/UK you also have the right to complain to your data protection authority.
Children
The service is not meant for children under 16.
Changes
If this policy changes in a way that matters, we'll update the date above and, for big changes, tell signed-in users by email.