Legal
Privacy
Last updated: 15 November 2026
HMOOD Digital (org. no. 938 373 310), Almveien 20, 1659 Torp, Norway, is the data controller for personal data processed on picshop.store. Contact: hei@hmood.no.
01What we store
- Account: email address, name, profile picture and description, and how you signed in (email/password or Google).
- Activity: packs you publish, purchases and sales, reviews, the time you agreed to waive your right to cancel, and your points history.
- Payments: amount, status and Stripe's payment reference. Card details are handled by Stripe and never stored by us.
- Technical: login sessions in cookies, and server logs for security.
Profile pictures and preview images are re-encoded so that location and camera metadata (EXIF/GPS) are removed. Original files are stored as uploaded.
02Why, and on what legal basis
- To provide the service you signed up for: accounts, buying and selling, points, downloads (contract).
- To keep accounting records of payments and refunds as required by Norwegian law (legal obligation).
- To prevent fraud and abuse, and to log administrator downloads (legitimate interest).
- To send emails about your purchases, sales and cancellation deadlines (contract).
03Who sees your data
Your name, profile picture, description, packs and reviews are public. Your email address is never shown to other users.
We use these processors, bound by data processing agreements:
- Supabase – database, sign-in and file storage
- Stripe – card payments and refunds
- Vercel – hosting
- Resend – sending email
- Google – only if you choose to sign in with Google
Some of these process data outside the EU/EEA under the EU standard contractual clauses or an adequacy decision.
04How long we keep it
Account data is kept while your account exists. Payment and accounting records are kept as long as Norwegian bookkeeping law requires (currently up to five years). Purchased licenses and the related order records are kept so buyers keep their rights.
05Your rights
You can ask for access to, correction of, deletion of, or a copy of your personal data, and object to processing based on legitimate interest. Email hei@hmood.no. You can complain to Datatilsynet (the Norwegian Data Protection Authority).
06Cookies
We only use cookies needed to keep you signed in and to complete payments. We do not use advertising or tracking cookies.