Privacy Policy

Last Updated: April 7, 2026

This Privacy Policy explains how Horizon.Pics ("Horizon," "we," "us") collects, uses, and protects your personal information.

1. Information We Collect

Account Information

  • Username: To identify your account
  • Email Address: Optional, for password recovery and communications
  • Password: Stored in encrypted form for authentication
  • Login Records: Anonymized timestamps and location data to prevent abuse
  • Security Features: Two-factor authentication codes and security keys (if enabled)

Content You Upload

  • Files, links, and text pastes you create
  • Metadata (upload dates, file names, settings)
  • All content is encrypted during storage

Usage Analytics

We use Umami, a privacy-focused, open-source analytics platform, to understand how visitors interact with Horizon. Umami runs on our own infrastructure ("first-party") and does not use third-party services or cookies.

We collect anonymous metrics including page views, browser type, operating system, device category, country of origin, and referring URLs.

Umami does not store personally identifiable information, IP addresses, or track users across websites. All data is aggregated and anonymized.

We use this data solely to improve Horizon's performance and user experience. You may use ad-blockers or disable JavaScript without impacting core functionality.

2. Legal Basis for Processing Your Data

We process your personal information based on your consent, which you provide when:

  • Creating an account and accepting this privacy policy
  • Enabling optional features (2FA, Discord login, email communications)
  • Uploading content to our service

You can withdraw consent at any time by deleting your account or contacting us.

3. How We Use Your Information

  • Provide and maintain the service
  • Secure your account and prevent abuse
  • Send transactional emails (account notifications, password resets)
  • Send marketing emails about service updates and features (you can opt out anytime)
  • Improve service performance through anonymized statistics
  • Process payments and manage subscriptions

4. Cookies

We use cookies to operate our service:

  • Essential Cookies: Session cookies that keep you logged in
  • Third-Party Cookies: Services like Cloudflare Turnstile may set their own cookies for security purposes

You can control cookies through your browser settings, but disabling essential cookies may prevent you from using certain features.

5. How We Protect Your Data

  • All uploaded content is encrypted at rest
  • Passwords and sensitive data are hashed and cannot be reversed
  • Communication between your device and our servers is encrypted
  • Servers are located in Germany with restricted physical and digital access
  • Data transfers between all servers and partners are encrypted

6. Automated Systems

We use automated systems to detect and prevent abuse. Accounts or content matching known patterns of abuse may be automatically suspended or removed. We do not use AI to scan or moderate your content for privacy reasons, and we do not transfer your data to third parties for scanning or analysis.

If you believe your account was suspended in error, please contact us at [email protected].

7. Sharing Your Information

We do not sell, rent, or trade your personal information. We only share data when:

  • You give explicit consent
  • Required by law: We will publicly disclose any legal requests if permitted
  • Service providers: Third-party services listed below that help operate our platform

8. Third-Party Services

We use the following services, each with their own privacy policies:

  • Cloudflare (USA): DDoS protection, content delivery, and spam prevention
  • Stripe (USA/Ireland): Payment processing
  • HCaptcha (USA): Spam prevention
  • Discord (USA): Optional account login
  • Hetzner (Germany): Server hosting
  • Backblaze (USA): Encrypted content storage
  • Loops: Transactional and marketing emails
  • DuckDuckGo (USA): Privacy-friendly favicon hosting

Additional infrastructure support is provided by supplementary data center partners. These providers maintain the underlying server and network infrastructure only; they do not process user information directly or access application data.

9. Data Retention & Deletion

  • Your Content: Stored until you delete it (deletion is permanent)
  • Account Data: Retained until you delete your account via Settings
  • Backups: Automatically deleted after 7 days

10. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data
  • Withdraw consent and object to data processing
  • Opt out of marketing emails (via the unsubscribe link in any marketing email)

To exercise these rights, contact us at [email protected] or use your account Settings.

11. Marketing Communications

If you provide an email address, we may send you marketing emails about new features, updates, and improvements to Horizon. You can opt out at any time by clicking the "Unsubscribe" button in any marketing email.

12. Data Breach Notification

If a data breach occurs, we will notify you within 7 days through announcements on our website and social media.

13. Children's Privacy

Horizon is not intended for users under 13 years old. We do not verify ages during registration. If you become aware of any underage users, please contact us immediately at [email protected], and we will delete their account and data.

14. International Data Transfers

Your data is primarily stored in Germany (GDPR-compliant). Content may be stored in the Netherlands, USA, or Canada through our service providers. By using Horizon, you consent to these international transfers.

15. Service Termination

In the unlikely event that Horizon shuts down, all user data will be permanently deleted. We will provide advance notice if possible to allow you to download your content.

16. Changes to This Policy

We may update this policy occasionally. Changes will be announced on our website and social media within 7 days, with the "Last Updated" date revised accordingly.

17. Contact Us

Questions about this policy? Email us at: [email protected]