Mozaicr
AccountStart with one photo

Legal

Privacy & retention

Effective date: 2026-06-14.

Plain-language summary, written in-house — not legal advice. For privacy requests, email support@mozaicr.com.

Who we are

Mozaicr is the data controller for the personal data described here. Contact us about privacy at support@mozaicr.com.

What we collect

  • Your photos — the main photo and the photos you select, read from your device or a connected cloud provider to build your mosaic.
  • Your email — to deliver your mosaic and your account link.
  • Payment details — handled by Stripe. We receive a confirmation and order metadata, never your full card number.
  • Basic usage data — minimal analytics and error logs to keep the service working.

Sub-processors

We share the minimum necessary with vendors that help run Mozaicr: cloud photo providers you connect (Google Photos, OneDrive, Dropbox), Stripe (payments), Microsoft Azure (compute and storage), Cloudflare R2 (mosaic image hosting), and our email provider (delivery). Each processes data only to provide its service to us.

Pre-purchase

Photos cached from Google Photos / OneDrive / Dropbox during the creation flow live in temporary storage scoped by userSessionId and are cleaned up after 7 days of inactivity.

Post-purchase raw inputs

Your main photo and full-resolution photos are kept long enough to support the rebuild / tweak flow and then cleaned up. Raw inputs are never downloadable from Mozaicr — your cloud provider is the source of truth.

Deliverables

Your mosaic image, slideshow video, and zoomable Gigapixel Mosaic are hosted for the full 10-year window. These are downloadable from /account.

Retention at a glance

  • Pre-purchase cached photos: ~7 days of inactivity, then deleted.
  • Post-purchase raw inputs: kept for the rebuild window, then deleted.
  • Deliverables (Masterpiece): hosted for the 10-year window.
  • After refund or account deletion: removed within 30 days.

Your rights (GDPR)

If you are in the EU/EEA or UK, you have the right to access, correct, delete, export (portability), restrict, or object to processing of your personal data, and to withdraw consent. The lawful bases we rely on are performing our contract with you (building and hosting your mosaic) and our legitimate interest in operating the service. Email support@mozaicr.com to exercise any right; you may also complain to your local supervisory authority.

Your rights (CCPA)

If you are a California resident, you have the right to know what we collect, to delete it, and to opt out of any “sale” of personal information. We do not sell your personal information. Exercise these rights at support@mozaicr.com.

Cookies

We use only the cookies and local storage needed to run the site and remember your in-progress mosaic. We do not use third-party advertising cookies.

Children

Mozaicr is not directed to children under 13 (or the equivalent age in your region) and we do not knowingly collect their data. Photos that include children are, of course, yours to make into a mosaic.

Account deletion

Raw inputs and deliverables are deleted within 30 days of refund or account deletion. Email support@mozaicr.com to request deletion.