Pixidia Privacy Policy
This translation is provided for information. In case of discrepancy, the French version prevails.
Version in force as of October 27, 2026 Table of Contents- 1. Preamble
- 2. Data Controller
- 3. Categories of Data Collected
- 4. Purposes and Legal Bases of Processing
- 5. Recipients of Data
- 6. Retention Periods
- 7. Rights of Data Subjects
- 8. Data Security
- 9. Transfers Outside the European Union
- 10. Cookie Management
- 11. Specific Pixidia Features
- 12. Processors and Extensions
- 13. Changes to This Policy
- 14. Contact
- 15. Complaints
- 16. Protection of Minors
- 17. Automated Decisions
- 18. Data Breach
- Technical Appendix and Regulatory Information
- Security Architecture
- Table of Retention Periods
1. Preamble
This privacy policy applies to the Pixidia.com website, published by the company Pixidia SAS, whose registered office is at 9 Rue Casimir Delavigne, 59000 Lille, France.
It informs users about how their personal data is collected, used, stored, protected, and shared.
It is based on the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the amended French Data Protection Act (Loi Informatique et Libertés), and the French legislation in force.
2. Data Controller
The data controller is Pixidia SAS, represented by its President, Mr. Léo Carpentier.
Contact: [email protected]
3. Categories of Data Collected
Pixidia collects and processes the following categories of data, depending on how you use the site:
- Identification data: last name, first name, username, email address, password (hashed), profile photo.
- Contact data: email address.
- Browsing data: IP address, connection logs, cookies, pages visited, actions on the site.
- Content data: itineraries, comments, collaborative chat messages, reviews, favorites, satisfaction questionnaires.
- Conversation data with Pixi: the messages you send to Pixi, its replies, and the results displayed during the exchange (see the section "11 bis. Pixi and Your Conversations"). A question asked to Pixi without an account is not linked to any account or email address.
- Transaction data: information related to subscriptions and payments (subscriptions managed by Pixidia, payment through Stripe), without retention of full banking details. Pixidia does not sell any travel service and does not collect any payment for travel.
- Technical data: device type, browser, operating system, error logs.
- Analytics data: only if you accept statistics, through Google Site Kit (Google Analytics). Your IP address is not stored: it is used for a brief moment to estimate your approximate location (country, region, city), then it is deleted.
- Form data: information entered when creating itineraries, booking or rental information that you enter yourself, and similar.
- Social data: social network identifiers (Google, Apple, Facebook) through our sign-in module, profile photos synchronized from social networks.
- Preference data: language choices, display theme, and search filters, saved through cookies (see section 10).
- Geolocation data: __Warning about photo metadata__: Images uploaded to Pixidia may contain EXIF data (GPS coordinates, date and time, and similar). We advise you to remove this metadata before uploading, because other users could extract it from shared images. Pixidia does not analyze or store this EXIF data.
4. Purposes and Legal Bases of Processing
Data is processed for the following purposes:
| Purpose | Legal basis | Technical example |
|---|---|---|
| Creation and management of a user account | Performance of a contract | Sign-up, profile management |
| Provision of Pixidia services | Performance of a contract | Creating and sharing itineraries, chat, favorites |
| Management of subscriptions and payments | Performance of a contract | Payment through Stripe |
| Handling of requests through forms | Legitimate interest / consent | User support, contact forms |
| Personalization of the user experience | Legitimate interest | Language preferences, dynamic display through ACF shortcodes |
| Site security and fraud prevention | Legitimate interest / legal obligation | Intrusion protection, monitoring |
| Anti-bot check for services open without an account | Legitimate interest: protecting these services against abuse (Art. 6.1.f GDPR) | Cloudflare Turnstile (Pixi's answer in the magazine, Pixi Activités) |
| Answering questions asked to Pixi without an account | Performance of the service you request (Art. 6.1.b GDPR) | Pixi's answer in the magazine search, Pixi Activités |
| Voice dictation | Performance of the service you request (Art. 6.1.b GDPR) | Speech recognition of your browser (see section 11 bis) |
| Audience statistics and analytics | Consent (cookie banner) | Google Analytics (IP address not stored) |
| Meeting legal obligations | Legal obligation | Accounting, fraud prevention |
| Fraud detection and prevention | Legal obligation (Art. 6.1.c GDPR) | Automatic detection, security logs |
| Content analysis of uploaded images (profile photo, trip image) | Legitimate interest: protecting travelers and the service against inappropriate content (Art. 6.1.f GDPR) | Automated check through the Google Vision API (detection of inappropriate content) |
| Social synchronization | Performance of a contract | Facebook/Google sign-in, storage of access tokens |
| Sending of service emails | Performance of a contract | Welcome, account security, purchases |
| Sending of activity emails (friends, trips, comments, departure reminders) | Performance of a contract / legitimate interest | Email notifications, can be turned off by category |
| Sending of news and offers by email | Consent | Unchecked box, withdrawal at any time, proof retained |
| Early access list | Consent | A single email, when Pixidia opens |
Image moderation is based on the legitimate interest of Pixidia and of travelers: having a safe space for sharing. It is used to spot inappropriate content in the profile photos and trip images you upload. The check takes place before the image is shown, because a check after a report would leave this content visible in the meantime.
The automated analysis can make mistakes. You can ask for a human review. You can also object to this processing, on grounds relating to your particular situation, by writing to [email protected]. We will then examine your request and any compelling legitimate grounds to continue the processing.
Images are sent to Google Vision (see sections 5 and 9). This analysis is not used to identify the people shown in the photos.
5. Recipients of Data
Your personal data is accessible only to:
- authorized members of the Pixidia team (administrators, moderators, technical support);
- the providers and processors listed in §12, within the limits of their assignment;
- when you use Pixi, the recipients described in the section "11 bis. Pixi and Your Conversations"; DeepSeek is not a processor of Pixidia;
- the competent authorities upon legal request.
No data is sold or transferred to third parties for commercial purposes.
6. Retention Periods
Data is kept for the period strictly necessary for the purpose pursued, then deleted:
- User account: Accounts remain active until the user requests deletion. A manual deletion procedure is started within 3 business days after a request by email to [email protected]. No automatic deletion for inactivity is currently implemented.
- Published content (itineraries, comments, chat, and similar): as long as the account exists, unless a specific deletion request is made.
- Server access logs: about 8 days (7-day rotation). Cloudflare also keeps delivery and security logs, for a period that it sets itself.
- Payment data: legal accounting retention period (10 years for invoices).
- Analytics data: Google Analytics keeps event details for 2 months, and data linked to your device for 14 months after your last visit (settings of our account checked on September 18, 2026). Your IP address is not stored by Google Analytics.
- Conversations with Pixi and services open without an account: see section "11 bis", heading "Retention periods".
- PDF trip books: cached copy replaced after 30 days and deleted each time the trip is changed.
- Backups: 14 daily, 8 weekly, and 12 monthly. Deleted data may therefore remain in them for up to 12 months (see the Technical Appendix).
- Former tracking of actions on the site: see the section "11. Specific Pixidia Features".
- Proof of consent to emails: as long as the account exists, deleted along with it.
See the detailed table in the Technical Appendix.
7. Rights of Data Subjects
In accordance with the regulations, each user has the following rights:
- Right of access: obtain a copy of the data concerning you.
- Right to rectification: correct or complete your data.
- Right to erasure: ask for your data to be deleted (right to be forgotten).
- Right to restriction of processing: ask for a temporary suspension of processing.
- Right to object: object to processing on legitimate grounds.
- Right to data portability: receive your data in a structured and commonly used format.
- Right to withdraw consent at any time for processing based on consent.
- Right to lodge a complaint with the CNIL (www.cnil.fr).
To exercise these rights: [email protected]
You may also set directives on what happens to your data after your death (Article 85 of the French Data Protection Act) by writing to the same address.
At sign-up, first name, last name, username, email address, password, and date of birth are mandatory. Without them, the account cannot be created. The other data you enter is optional, unless the relevant form says otherwise.
8. Data Security
Pixidia puts in place technical and organizational measures to protect your data:
- Hosting with Hostinger (Linux server, HTTPS enabled, restricted access).
- Passwords stored in hashed form.
- Access to data limited to authorized persons only.
- Regular backups, protection against intrusions and malware.
- Management of cookies and consents through our in-house banner (developed by Pixidia).
- Logging of access and sensitive actions.
- Automatic cleanup of obsolete data (for example, deleted chat messages are removed after 30 days).
- Comment moderation: comments that contain certain words or too many links are held for manual approval.
See the Technical Appendix on the security architecture.
9. Transfers Outside the European Union
As a principle, data is hosted and processed in the European Union. Some providers may transfer data outside the EU. In that case:
- Google Analytics and Google Vision API: data goes to Google LLC, in the United States. For Google Analytics, this is pseudonymized browsing statistics. For Google Vision API, this is the images you upload (profile photo, trip image). The transfer relies on the adequacy decision of the European Commission of July 10, 2023 (EU-US Data Privacy Framework), to which Google LLC adheres, supplemented by standard contractual clauses (SCCs). This data is not anonymized.
- Google Translate (automatic translation, turned on at your request): the text of the pages to translate and technical information go to Google, with possible processing outside the European Union.
- Stripe (payments): use of SCCs with AES-256 encryption.
- Hostinger: servers located in France (Paris), under ISO 27001.
Special case of Pixi: if you use Pixi, your messages are subject to a separate transfer. It takes place to a country that does not benefit from an adequacy decision of the European Commission, and for which no safeguard under Chapter V of the GDPR exists. It is described in the section "11 bis. Pixi and Your Conversations", heading "Transfer outside the European Union".
10. Cookie Management
Without your consent, or if you decline, no audience measurement or marketing cookie is placed. No measurement request is sent to Google Analytics, Google Tag Manager, or PostHog. This was checked on October 27, 2026 on the home page, the articles, the magazine, and Pixi Activités. Google Analytics and PostHog are loaded only if you accept the "Statistics" category. The site uses the following cookies and trackers, as they are listed in the banner:
| Cookie | Type | Duration | Purpose | Related plugin |
|---|---|---|---|---|
| pixidia_consent | Strictly necessary | 6 months (180 days) | Remember your cookie choices | Pixidia cookie banner |
| wordpress_logged_in | Strictly necessary | 14 days | Account authentication | WordPress |
| pix_csrf | Strictly necessary | 1 hour | Protection against CSRF attacks | Pixidia |
| pix_sess | Strictly necessary | Session | Keeping your session active | Pixidia |
| pix_lang_manual | Strictly necessary | 1 year | Language explicitly requested | Pixidia |
| pix_theme | Preferences | 1 year | Light or dark mode | Pixidia |
| pix_filters | Preferences | 30 days | Latest search filters | Pixidia |
| googtrans | Google Translate (with consent) | Session | Current translation language | Google Translate (GTranslate) |
| _ga, _ga_* | Statistics (with consent) | 13 months (390 days), not extended at each visit | Google Analytics 4 audience measurement | Google Site Kit |
| ph_*_posthog and browser local storage | Statistics (with consent) | 12 months (365 days) for the cookie; local storage until cleared | Measurement of site usage (see heading 10 bis) | PostHog |
| _gcl_au | Marketing (with consent) | 90 days | Google Ads conversion measurement, placed only during an active campaign | Google Site Kit |
- A cookie management banner lets you accept or decline non-essential cookies. Your choice is kept for 6 months (180 days), then asked again.
- You can change your consent at any time through the "Cookie preferences" link at the bottom of every page.
- Pixidia does not place any partner cookie. After a click on a partner link, the partner's site places its own cookies, according to its policy (see "Partner and affiliate cookies" in the appendix).
Google Fonts typeface. On most pages of the site, including the magazine, Pixi Activités, Discover, and this page, the Urbanist typeface is currently loaded from Google's servers (fonts.googleapis.com and fonts.gstatic.com). It is loaded as soon as the page opens, before any choice on your part. Your IP address is then sent to Google. No cookie is placed. This paragraph will be removed when the typeface is hosted on Pixidia's server.
The articles also load some libraries from cdnjs, a Cloudflare service, which is already a delivery provider of the site.
11. Specific Pixidia Features
- Internal social network: management of friends, shares, notifications, collaborative chat.
- Favorites: managed through usermeta, multi-device synchronization, deletion on request.
- Custom forms: collection of information about trips, bookings, reviews, and similar.
- Publicly shared itineraries: an itinerary is private by default, and its author can make it public. Visitors can then see the name and profile photo of the other adult travelers who have an account, with a link to their profile. Participants without an account and travelers under 18 do not appear. This display is based on the legitimate interest of the author and of Pixidia in sharing a travel story (Art. 6.1.f GDPR). You can object to it at any time, without giving a reason: write to [email protected] or leave the trip, and your name and photo no longer appear there. A setting to do this yourself is coming.
- Invitation links to a travel group: the organizer can share an invitation link. Anyone who opens this link sees the group's title and destination, the organizer's name and profile photo, the number of members, and the remaining spots. Joining the group requires an account. The link is valid for 30 days and the organizer can deactivate it before then.
- PDF export: generation of trip books, cached copy replaced after 30 days and deleted each time the trip is changed.
- Booking information: the information you save yourself in a trip is stored with that trip. Pixidia does not book anything on your behalf and does not collect any payment for travel; when you follow a link to a provider, you contract directly with that provider.
Tracking of actions on the site (former behavioral profile)
Pixidia has kept a former module that used to record some of your actions on the site, with your account.
It used to record the items added to a trip, the favorites added or removed, the actions on Discover, and the ratings given. It also used to record the text of your card comments (500 characters at most) and the answers to the onboarding questionnaire of the former traveler profile.
Since October 27, 2026, this tracking has been limited to four internal Pixidia accounts. It applies only with their recorded explicit consent (Art. 6.1.a GDPR). None of these accounts has given this consent to date. None of your actions is therefore recorded by this module any longer.
The signals recorded before that date remain linked to your account. No automatic purge period exists. They are kept until this former module is removed, then archived offline. While they remain on the site, deleting your account erases them. No new signal is added outside the framework described above. You may ask for their erasure and object to this tracking at any time by writing to [email protected].
12. Processors and Extensions
Pixidia uses the following providers, strictly within the limits of their assignment:
| Provider | Data shared | Safeguards | Policy link |
|---|---|---|---|
| Hostinger | Hosting, logs | ISO 27001, hosting in France | https://www.hostinger.com/legal/privacy-policy |
| Google Site Kit | Pseudonymized browsing statistics | EU-US adequacy decision of July 10, 2023, and standard contractual clauses | https://policies.google.com/terms?hl=en |
| Cloudflare | IP address, logs, anti-bot check (Turnstile), running of Pixi Activités | SCCs, SOC 2 | https://www.cloudflare.com/privacypolicy/ |
| OVH (sending of emails) | Email address and content of the emails we send you | Hosting in France (European Union) | https://www.ovhcloud.com/en-gb/personal-data-protection/ |
| Google, Apple, Facebook (sign-in to your account) | Identifier and email address, only if you choose to sign in with one of these accounts | According to each provider's policy | Google, Apple, Facebook |
| Hostinger (full server backups) | Disk image of the server, including all data | Netherlands (European Union), about 15 days of retention | https://www.hostinger.com/legal/privacy-policy |
| Backblaze (backups) | Encrypted backup copies of the database | Storage in the European Union (the provider's "eu-central" region). Backblaze, Inc. is a US company: access from the United States cannot be ruled out. | https://www.backblaze.com/company/policy/gdpr |
| Stripe (payment) | Payment data for subscriptions | See section 9 | https://stripe.com/privacy |
| PostHog (site usage measurement, only if you accept statistics) | Page views, clicks, errors, session recordings (see heading 10 bis) | European instance in Frankfurt. PostHog, Inc. is a US company: access from the United States cannot be ruled out. | https://posthog.com/privacy |
| Google Vision and Google Translate | Images you upload (Vision); text of the pages to translate (Translate) | See section 9 | https://policies.google.com/privacy?hl=en |
| Pixi (DeepSeek, DeepSeek Search, Google Vertex AI, Duffel, LiteAPI, Viator, Google Places and Routes) | See section 11 bis | See section 11 bis | See section 11 bis |
13. Changes to This Policy
Pixidia reserves the right to change this privacy policy at any time.
Users will be informed of major changes by email or by notice on the site. The version in force can be consulted at any time on the dedicated page:
https://pixidia.com/politique-de-confidentialite/
14. Contact
For any question about the privacy policy or the management of personal data, contact:
- By email: [email protected]
- By mail: Pixidia SAS, 9 Rue Casimir Delavigne, 59000 Lille, France
15. Complaints
- Response time: 72 hours for acknowledgment of receipt, resolution within 30 days at most.
- Proof of identity: if there is reasonable doubt about your identity, we may ask you for a supporting document.
- Mediation: If your written complaint sent to Pixidia ([email protected]) has not been resolved, you may use, free of charge, the consumer mediator to which Pixidia is attached: CM2C (Centre de la Médiation de la Consommation de Conciliateurs de Justice), 49 rue de Ponthieu, 75008 Paris, France, https://www.cm2c.net/. This recourse is optional.
- If you believe, after contacting us, that your rights are not being respected, you may lodge a complaint with the CNIL (www.cnil.fr).
16. Protection of Minors
- Sign-up is prohibited for persons under 15 (Article 45 of the French Data Protection Act), checked through a declared date of birth, which is mandatory to use the site.
- When you chat with Pixi, a word list spots messages that mention a sensitive subject (health, religion, disability, sexual orientation, political or trade union opinions). It does not use artificial intelligence. It reduces their retention period to 30 days (see the section "11 bis. Pixi and Your Conversations").
17. Automated Decisions
- No solely automated decision: Pixidia makes no decision based solely on automated processing that produces legal effects concerning you or significantly affects you (Art. 22 GDPR). Your traveller profile is only used to rank and suggest: trips, places, activities and Pixi’s answers. It does not decide any price, any access or your eligibility for an offer, and it denies no service. Every choice stays yours: a suggestion becomes nothing without your action.
- Staying in control of your profile: you can correct your traveller profile, or request the export or erasure of your data, at any time.
- Common rules and protection against abuse: Pixi's usage limits are the same for every account on the same plan, and no data from your profile is used to set them. Protections against abuse (a limited number of requests, an anti-bot check) can block access for a few minutes up to one day, based on the technical behavior of the connection, never on your profile.
- Contesting and talking to a person: you can contest a suggestion or a piece of information from Pixi by writing to [email protected]. A member of the team reviews your request.
- Recommendations: how Pixi makes recommendations is explained on the page Transparency & Partnerships, section "How Pixi Makes Recommendations".
- Questions: [email protected].
18. Data Breach
- In the event of a personal data breach, we notify the CNIL within 72 hours after becoming aware of it, unless it is unlikely to result in a risk to your rights and freedoms (Article 33 of the GDPR).
- If the breach is likely to result in a high risk to your rights and freedoms, we inform you without undue delay (Article 34 of the GDPR).
Technical Appendix and Regulatory Information
Security Architecture
- TLS 1.3 encryption with cipher suite: TLS_AES_256_GCM_SHA384
Table of Retention Periods
| Data | Duration | Deletion process |
|---|---|---|
| Audience measurement cookies (placed only if you accept statistics) | Google Analytics: 13 months at most (390 days), not extended automatically at each visit; PostHog: 12 months (365 days) | Your choice is kept for 6 months (180 days), then asked again. If you withdraw your consent, these cookies are no longer used; you can delete them from your browser. |
| Chat messages | 30 days | Automatic daily deletion of messages deleted more than 30 days ago |
| Backups | 14 daily, 8 weekly, 12 monthly | Encryption, then AES-256 overwriting |
| Cached PDF trip books | 30 days | Replaced at the next request after 30 days, deleted each time the trip is changed |
Partner and Affiliate Cookies
Pixidia uses affiliate links to commercial partners in the travel sector. When you click on one of these links, you leave Pixidia for the partner's site, which then places its own cookies according to its own policy, in order to attribute the purchase to Pixidia. Pixidia does not place any partner cookie on its pages.
What Pixidia records
Pixidia counts clicks on its partner links on the server side, without a cookie. It records one total per day, per partner, per page, and per language. It records no IP address and no identifier. These totals are kept for 13 months. If you have accepted the "Statistics" category, Google Analytics also receives a click event.
The link carries Pixidia's partner identifiers and the identifier of the originating article, so that the partner pays Pixidia.
Active affiliate partners
| Partner | Use | Cookie placed by Pixidia | Cookies after your click |
|---|---|---|---|
| Viator (Tripadvisor group) | Activities and excursions: magazine, Pixi, Pixi Activités | None | Placed by Viator, according to its policy |
| Discover Cars | Car rental, case by case in some articles | None | Placed by Discover Cars, according to its policy |
| Airalo | eSIM, in the eSIM guide only | None | Placed by Airalo, according to its policy |
Pixidia is paid a commission by the partner when you buy after a click. The detailed list of our partners is available on our page Transparency & Partnerships.
Managing your preferences
You can change your cookie preferences at any time through our cookie management banner or by contacting us at [email protected]. Cookies placed by a partner after your click are managed from your browser settings and the partner's policy.
10 bis. Measurement of Site Usage (PostHog)
If you accept the "Statistics" category of the cookie banner, and only in that case, Pixidia measures site usage with PostHog. If you decline, no PostHog script is loaded and no PostHog tracker is placed.
- Where: your account area, the itineraries, the magazine articles, the home page, and Pixi Activités.
- Why: to understand where people run into difficulties, to fix defects and errors, and to measure the path from reading an article to creating an account.
- Legal basis: your consent, which you can change at any time through the "Cookie preferences" link at the bottom of every page.
- What is measured: page views, clicks and interactions, perceived performance, technical errors, with a pseudonymous internal identifier. Your IP address is not stored. Your email address, your name, and what you type in fields are not sent.
- Where the data is stored: European instance of PostHog in Frankfurt (Germany). Delivery goes through Cloudflare.
- Retention: events and person data 12 months; session recordings 30 days; PostHog cookie 12 months.
11 bis. Pixi and Your Conversations
What Pixi is
Pixi is an artificial intelligence system (Regulation (EU) 2024/1689, Article 50, paragraph 1). Its replies are generated automatically. They are not written by a person.
On the Pixi page and on Pixi Activités, the message displayed is: "Pixi is an artificial intelligence. It can make mistakes: check what matters."
Pixi answers your travel questions on the Pixi page (available from the site menu), on the page of your itineraries, in the magazine search, and on Pixi Activités. Check important information (hours, prices, conditions, formalities) before you book or decide.
Each reply from Pixi is recorded with a notice stating that it comes from an artificial intelligence. This notice also appears in the export of your conversations, from the data management screen on the Pixi page.
Pixi without an account: magazine answer and Pixi Activités
Two Pixi services are used without creating an account. No account identifier is linked to your messages. A Cloudflare Turnstile anti-bot check is required when a session starts, and your IP address is then sent to Cloudflare. Do not enter personal data: not all of it is spotted before sending.
- "Pixi's answer" in the magazine search. Your question is stripped of email addresses, phone numbers, and long strings of digits. It carries no identifier. It is sent to DeepSeek (see below) to write the answer. It is also sent to Google Vertex AI, in the europe-west1 region (Belgium), for the search in our guides. It is minimized, not pseudonymized: the rest of what you write is sent as is. The answer produced is kept for 24 hours in the site cache, without an identifier. Anti-abuse counters, calculated from a non-reversible fingerprint of your IP address, are kept for 24 hours. The question appears in the page address, and therefore in the server access logs for about 8 days. The magazine search log keeps no IP address and no identifier. It is purged after 90 days.
- Pixi Activités ("Activités" page). Pixi offers only activities from our partner Viator there. Your messages and the last 16 messages of the session are sent to DeepSeek, without redaction. The search sends Viator the criteria of your request (place, dates, group size). The service runs on the Cloudflare network (Workers). The text of the exchanges is erased at the end of the session (2 hours at most, or 20 minutes without activity). Cloudflare keeps technical logs of the running of the service, 7 days at most. Anti-abuse counters, calculated from a non-reversible fingerprint of your IP address, last about one hour. Pixidia records only the cost of the exchange, without the text.
Discover search
The natural-language search of Discover is open to everyone, with or without an account. It sends your query to Pixi's model (DeepSeek, see Section 9). Email addresses, phone numbers, and strings of 7 digits or more are replaced before sending. The dialogue is kept for 24 hours without activity.
Without an account, an invisible anti-bot check (Cloudflare Turnstile) accompanies each dialogue, and a random session identifier, kept in your browser, links your searches together. For this session, Pixidia keeps, without your identity, the travel preferences inferred from your searches, in order to rank the itineraries offered, for 7 days after your last search.
Voice dictation
On Pixi Activités and in the interview that builds your traveler profile, a button lets you dictate your message. Speech recognition is that of your browser (Web Speech API). The browser's vendor processes the audio under its own terms (for example Google for Chrome, Apple for Safari). Pixidia receives only the transcribed text and treats it as a written message. It records no audio on its servers. Legal basis: performance of the service you request.
Data concerned
- Your messages and Pixi's replies, with their date.
- The results displayed during the conversation (indicative and dated prices for flights and accommodations, web sources, seasonal information).
- The title of the conversation and, if you link one, the related trip.
- A summary of your traveler profile (the known traits and their level of confidence, and its summary if one exists) and the list of your trips (title, destination, dates, status). Pixi receives them so that its replies are useful to you.
- Your answers to retention proposals (agreement, refusal, withdrawal, with their date).
- The information that Pixi remembers at your request (memories), your challenges to a piece of information, your confirmations of actions, and the log of recommendations.
- An erasure record, which contains no message content.
- A log of the cost of using Pixi (the "ledger"). For each call, it records the provider, the amount, and the date. It is linked to your account when you are signed in. It does not contain the text of the messages.
Pixi is instructed not to ask you for health, religion, sexual orientation, or other sensitive data. Like any artificial intelligence, it may fail to follow this instruction. If you share such data, read the part "Sensitive data" below.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your questions (sending to the artificial intelligence model, web searches, flight and accommodation prices, place search) | Performance of a contract (Art. 6.1.b GDPR) |
| Keeping your conversations so that you can find, search, and export them | Performance of a contract (Art. 6.1.b GDPR) |
| Automatically applying a word list to your message and to Pixi's reply, to spot a sensitive subject | Protective measure built into the conversation. It is used only to reduce the retention period. It does not require specific prior consent, according to the position of the CNIL on conversational agents (guidance of February 19, 2021: prior warning and quick purge when sensitive data arrives unpredictably in a free field). |
| Reducing to 30 days the retention period of a message spotted as sensitive | Legitimate interest: limiting the retention period of this data (Art. 6.1.f GDPR) |
| Keeping information useful for the trip (allergy, diet, mobility) until the end of your trip | Your explicit consent (Art. 9.2.a GDPR), which you can withdraw at any time |
| Limiting the use of Pixi so that it stays available and its cost stays under control | Legitimate interest (Art. 6.1.f GDPR) |
| Backing up the service and making sure a deletion stays effective after a restoration | Legitimate interest (Art. 6.1.f GDPR) |
Pixi adds nothing to your traveler profile from your conversations. Pixidia does not use your conversations to train or improve an artificial intelligence model.
Prices, places, and itineraries
Pixi may display indicative prices for accommodations (LiteAPI) and flights (Duffel). They are dated ("Retrieved on" followed by the date and time). Only the destination or airports, the dates, and the number of travelers are sent to these services. They are price sources. No paid link is attached to them, and Pixidia books nothing.
To find a place or draw a route, Pixi queries Google Places and Google Routes. It sends them a place search text (120 characters at most), coordinates, or places, without an account identifier.
Who receives your data
| Recipient | What it receives | Country |
|---|---|---|
| DeepSeek, provider of the model that runs Pixi | With Pixi connected to your account: your messages and the conversation history, the summary of your traveler profile, the list of your trips, and the search results. In a trip's chat, the names of the trip members and detected email addresses are replaced by codes before sending. Outside a trip, your own first and last name are also replaced by codes, except in the interview that builds your traveler profile. The rest of the text is sent as is. With Discover search: the query, stripped of email addresses, phone numbers, and long strings of digits. Without an account (magazine answer, Pixi Activités): the question or messages, without an identifier, as described above. | China (outside the European Union) |
| DeepSeek Search (Pixi's web search) | The search query that Pixi writes from your question (128 characters at most). The first and last names that Pixidia knows (yours and, in a trip, those of its members) are replaced there by codes before sending. If one of them cannot be replaced, the search is not run. The rest of the query is sent as is. | China (outside the European Union) |
| Google Vertex AI (search in the magazine guides) | The question asked in the magazine search, stripped, without an identifier | Belgium (europe-west1 region, European Union) |
| Duffel (flight prices) | The criteria of a flight search (airports, dates, number of travelers) | Not applicable: search criteria without a person identifier |
| LiteAPI (accommodation prices) | The criteria of an accommodation search (place, dates, number of travelers) | Not applicable: search criteria without a person identifier |
| Viator (activity search) | The criteria of an activity search (place, dates, group size) | Not applicable: search criteria without a person identifier |
| Google (Places and Routes) | The place search texts and the coordinates or places of a route, without an account identifier | Outside the European Union (Google LLC, United States; see section 9) |
| Cloudflare (delivery and security network of the site, Turnstile anti-bot check, running of Pixi Activités) | The traffic between your browser and our server, including your messages, and the IP address for the anti-bot check | Worldwide network, locations assigned dynamically |
| Hostinger (hosting of the site and the database) | All the conversation data, stored on our server | France (Paris) |
| Backblaze (storage of backups) | Backup copies of the database | European Union (the provider's "eu-central" region). Backblaze, Inc. is a US company: access from the United States cannot be ruled out. |
| Hostinger (full server backups) | All the server data, including the conversation database | Netherlands (European Union) |
Transfer outside the European Union
For Pixi to reply to you, your messages are sent to DeepSeek. DeepSeek processes them in China, and therefore outside the European Union. DeepSeek is a controller separate from Pixidia. No processing agreement binds us to it. We do not control the use it makes of the data it receives.
China does not benefit from an adequacy decision of the European Commission. No other safeguard under Chapter V of the GDPR exists for this transfer: no standard contractual clauses and no binding corporate rules. The level of protection of your data there is therefore not recognized as equivalent to that of the European Union.
We have no contractual commitment from DeepSeek on the retention period of this data, or on its use to train its models. We can neither guarantee nor rule out either of these.
The risk is as follows. The authorities of that country may have access to this data under local law. Your rights (access, erasure, objection) are harder to enforce against DeepSeek than against an organization located in the European Union. The same reservation applies to Pixi's web search, which goes through DeepSeek Search.
Measures taken. In Pixi's chat on a trip, the first and last names of the trip members and the email addresses are replaced by codes before sending. Sending fails rather than going out without this replacement. With your account, outside a trip (Pixi chat, Discover), your own first name, last name, and display name are also replaced by codes. They are still sent in the clear in the interview that builds your traveler profile. Their replacement there is planned, and this page will be updated when it is in place. The name of another person that you mention freely in a message is not masked. Avoid writing information about other people. Phone numbers, dates of birth, and other information that you write freely are not replaced. In web search queries, these same first and last names are replaced by codes, and the search is not run if any of them remains. The queries that Pixi sends to its other tools (places, prices) may contain a name if Pixi puts it there. Without an account (magazine answer, Pixi Activités), data is minimized and no identifier is sent.
We review this point regularly. We will switch to hosting of the model in the European Union as soon as it is available, and we will then update this page.
If you do not want this transfer, do not write to Pixi. Pixi is optional: you can use the rest of Pixidia without it.
Sensitive data
You may talk about your health, a disability, your religion (for example a halal or kosher diet), or other sensitive subjects. This is what happens:
- At the end of each completed exchange, a list of words and expressions in five languages is applied to your message and to Pixi's reply. This check runs on our server in France, without artificial intelligence: no AI rereads your messages for this.
- Your message has already been sent to DeepSeek so that Pixi can reply to you. The detection does not prevent that. It only shortens the period during which we keep the message.
- We keep neither the detected word, nor the category, nor an excerpt. We keep only the deletion date.
- The detection is wrong in both directions. It may miss a sensitive message: the message is then kept like an ordinary conversation, 12 months after the last message. It may wrongly flag a message that is not sensitive: the message is then erased after 30 days. An exchange interrupted by an error is not analyzed. To be sure that a message disappears, delete the conversation.
- None of this information is added to your traveler profile.
Retention periods
| Data | Duration |
|---|---|
| Conversation with Pixi (signed-in account) | 12 months after its last message (from you or from Pixi). Renaming, pinning, or reopening a conversation does not extend this period. An automatic process runs every hour. |
| Exchange spotted as sensitive | 30 days after your message |
| Exchange kept with your agreement until the end of the trip | 30 days after the end date of the trip (see "Sensitive data") |
| Conversation you delete, or all your conversations | Immediate erasure from the database, except for the backup copies below |
| Dedicated backup of the conversation history (encrypted) | Kept for 35 days, then permanently erased at our storage provider. A deleted conversation therefore disappears from these copies in about 66 days at most. |
| General site backups (14 daily, 8 weekly, 12 monthly) | They do not contain the messages of your conversations. They contain the other data of the database, including Pixi's data (memories, confirmations, challenges, logs). Deleted data may remain in them for up to 12 months. They are used only to restore the service. |
| Full server backups at our host (disk image) | About 15 days. They contain all the server data, including your conversations. |
| Erasure record (identifier of the account and of the erased conversation, with no content at all) | 400 days. It is used to make sure erasure holds after a backup is restored. |
| Table linking the codes to the names or email addresses replaced before sending to the model | 365 days after last use |
| Memories (information that Pixi remembers at your request) | 12 months |
| Challenge to a piece of information from Pixi | 30 days |
| Log of recommendations (pseudonymized) | 180 days |
| Confirmations of actions and feedback on Pixi | No automatic purge exists at this time |
| Question asked without an account in the magazine search | Search log: 90 days, without IP address or identifier. Answer produced, in cache: 24 hours. Anti-abuse counters: 24 hours. Server access logs: about 8 days. |
| Conversation on Pixi Activités (without an account) | Text of the exchanges: 2 hours at most (length of the session), or 20 minutes without activity, then erasure. Technical running logs at Cloudflare: 7 days at most. Anti-abuse counters: about 1 hour. |
| Discover search dialogue | 24 hours without activity |
| Log of the cost of using Pixi (ledger) | As long as the account exists, for data linked to an account. No automatic purge exists at this time. |
Your rights over your conversations
- From the data management screen on the Pixi page: export all your conversations to a structured file (JSON), delete one conversation, or all of them.
- View and withdraw at any time an agreement to keep data until the end of the trip.
- For any other right (access, rectification, erasure, restriction, objection, portability) or a question about the transfer outside the European Union: [email protected]. You may also contact the CNIL (www.cnil.fr).
11 ter. Emails Pixidia Sends You
Pixidia sends you emails from an address of the pixidia.com domain, through OVH (see §12). There are three kinds, and only the third one asks for your agreement.
The three kinds of emails
| Kind | Examples | Legal basis | Can you turn them off? |
|---|---|---|---|
| Service emails | Welcome, password and account security, change of address, purchases and refunds, photo rejected by moderation, account deletion, export of your data | Performance of a contract (Art. 6.1.b GDPR) | No: they concern your account, your security, or your purchases. They contain no advertising. |
| Activity emails | Friend request, trip invitation, addition to a team, comments and replies, mentions, departure reminders, announcements about how the service works | Performance of a contract (Art. 6.1.b GDPR) and legitimate interest in keeping you informed of what happens on your account (Art. 6.1.f) | Yes, by category (friends, trips, messages, comments, announcements) or all at once. |
| News and offers | Pixidia news, offers | Your consent (Art. 6.1.a GDPR and Art. L. 34-5 of the French Postal and Electronic Communications Code) | Yes, at any time. Nothing is sent until you have given your agreement. |
A service or activity email never contains a promotion: as soon as a message presents an offer, it falls under the third kind and is sent only to people who have given their agreement.
How you choose
- In Settings, "Emails and notifications" tab: you turn each category of activity emails on or off, you give or withdraw your agreement to news and offers, or you turn off everything optional in one click.
- In every optional email: an unsubscribe link opens a confirmation page, without signing in. The "Unsubscribe" button of your email app (Gmail, Yahoo, Apple Mail) also works.
- At sign-up: a box, unchecked by default and separate from the acceptance of the Terms of Use, offers you to receive news and offers. It is optional.
- Your choice takes effect immediately. We check it again at the time of sending: if you change your mind in the meantime, the message is not sent.
Proof of your agreement
When you give or withdraw your agreement to news and offers, we record the date, the place where you did it (sign-up, settings, link in an email), the version of the text displayed next to the box, and your language. This information proves your choice. It is kept as long as your account exists and deleted along with it. It appears in the export of your data.
No read tracking
Our emails contain no tracking pixel and no measurement parameter in their links: we do not know whether you open them, or what you click on. Their images come from our own server, which keeps the usual technical logs (about 8 days, see §6).
Early access list
If you left your first name, last name, and email address on the early access page, this data is used only to write to you once, when Pixidia opens (legal basis: your consent at the time of sign-up, Art. 6.1.a). This message contains an unsubscribe link. We do not use this data for other mailings: to receive our news and offers afterwards, you will need to give your agreement from your account. You may ask for its deletion at any time: [email protected].
Your rights
You may object at any time, free of charge, to email marketing (Art. 21 GDPR): the means above are enough, or write to [email protected]. Your other rights are described in §7, and you may contact the CNIL (www.cnil.fr).
11 quater. Business Listings
The page for creating a business listing (pixidia.com/fiche-etablissement/) allows an accommodation, restaurant, visitor attraction, activity, transport provider or rental company to send us its information. It is used without an account. This section concerns the person who fills in the listing.
The data concerned
- The business: name, type, address, postal code, city, opening hours and up to five photos.
- The contact: a telephone number and an email address. For a shopkeeper or a self-employed person, these are often personal data.
- Proof of your agreement: the date of submission, the version of the text displayed next to the box, and your truncated IP address (the last number of an IPv4 address is replaced with 0, and an IPv6 address is shortened to its first four groups).
The photos are re-saved by our server before being stored: their metadata, including the GPS location, is removed.
Why and on what legal basis
- Checking and then publishing the listing, to present it to travelers on Pixidia: your consent, given through the mandatory box before submission (Art. 6.1.a). You may withdraw it at any time, and the listing is then removed.
- Contacting you about the listing (question, verification, update): the same basis. We do not use these contact details for marketing.
- Keeping proof of your agreement and protecting the form against abuse: Pixidia's legitimate interest (Art. 6.1.f).
What is shown to travelers
A listing can be shown only after it has been checked by the Pixidia team. Only the name, type, address, telephone number, opening hours and approved photos are intended for travelers, on Pixidia's pages and in the answers of Pixi, Pixidia's artificial intelligence. The email address is never shown: it is used only to write to you. We will complete this section before published listings appear on the site.
Who receives your data
- The Pixidia team, which checks the listings. The message that alerts it to a new listing contains only the name of the business, its city and a reference, with no telephone number or email address.
- Hostinger, our host, which stores the listings and photos in the European Union, and Cloudflare, which receives your IP address for the Turnstile anti-bot check required before submission (see §12).
To limit abuse, we count submissions per IP address, in an encrypted and irreversible form, for 30 minutes.
Retention periods
- Listing awaiting verification: until we make our decision.
- Published listing: for as long as it is online. You may request its removal at any time.
- Rejected or removed listing: deleted with its photos three months after the decision.
- Proof of your agreement: five years after the listing is deleted, so that we can respond to a challenge, and then erased.
Your rights
You may view, correct or have deleted the listing and its photos, and withdraw your agreement, by writing to [email protected] from the email address given in the listing or by quoting its reference (it starts with EF-). We reply within one month. Your other rights are described in §7, and you may contact the CNIL (www.cnil.fr).
Document written on March 16, 2026, updated on November 10, 2026.Governing version
The French text is the governing version. This English version is an official translation provided for information. If it differs from the French text, the French text prevails. This does not deprive you, as a consumer, of the protection of the mandatory provisions of the law of the country where you habitually reside, as provided by Article 6(2) of Regulation (EC) No 593/2008 ("Rome I").