Privacy policy

This is a translation. The German version (Datenschutzerklärung) is the binding one.

Piclines (piclines.com) turns pictures and PDF pages into lines for CAD and laser programs. This page says what data that involves, where it is kept, for how long and why. In short: your pictures stay on our server in Germany and are deleted after 24 hours. We use no tracking, show no ads and pass your pictures to no one.

1. Who is responsible

Sahand Azizigargari, Zehando
Marienstraße 8, 01945 Ruhland, Germany
Email: support@piclines.com
Phone: +49 171 4918566

We have no data protection officer and are not required to. Send questions about your data to the address above.

2. Our server

Piclines runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in its data centre in Nuremberg. Whatever this page says is "on our server" is there. Hetzner processes the data only on our behalf, under a data processing agreement with us (Art. 28 GDPR).

Hetzner backs the server up daily. A backup is overwritten after seven days. The connection between your browser and our server is encrypted (HTTPS).

3. Visiting the site

With every request our server processes your IP address, the date and time, the address requested (for a conversion, with its random ID) and the server's answer. Without these the server cannot deliver a page. To find faults and fend off attacks we write your IP address, the time, the kind of request and the answer to logs (a conversion's ID only by its first characters, which open nothing), delete them after 14 days and do not combine them with other data.

To prevent abuse, the server also counts how many conversions an IP address starts (or your account, when you are signed in), and how many sign-in attempts and account emails there are per email address and per IP address. These counts are kept in memory only and expire after an hour.

To see how Piclines is used, we count per day how often the home page and the guide pages are viewed (by programs such as search engines' left out), how many conversions are started and finished, downloaded and opened in the editor, and how many accounts are made. Only these numbers are kept: no IP address, no cookie, nothing about your browser and nothing that relates to you. They stay as long as we need them.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a safe service that works.

4. Your pictures and results

When you upload a picture or a PDF file, our server stores the file, its name, the options you chose, the files made from it (preview, DXF, DWG, SVG) and a technical log of the conversion. All of it is in a folder with a random ID that only your browser learns. 24 hours after the upload we delete the folder automatically, with everything in it. Until then it may also be in the server's daily backup (section 2), which is overwritten after seven days; we use the backups only to restore the server after a fault, and a restored server deletes such folders again as soon as it starts.

The conversion runs entirely on our server, with our own software. Your pictures go to no other company and no AI service, and they are not used to train any software. We do not look at them unless you ask us to check a conversion.

Piclines Editor: When you choose “Open in editor”, the Piclines Editor (edit.piclines.com, based on Open CAD Studio) opens in a new tab and loads your drawing from our server through a link that works for ten minutes. You then edit the drawing in your browser: the editor sends it to no one, not to us either. When you save it, your browser downloads it.

The legal basis is Art. 6(1)(b) GDPR: the conversion is the service you ask for.

5. Your account

The preview needs no account; downloading does. You create one with an email address and a password, or sign in with Google (section 6). On our server we keep:

• your email address;
• your password only as a hash (Argon2id), from which it cannot be worked out; with Google sign-in alone there is no password;
• if you sign in with Google, your Google account's ID;
• when the account was created, and your balance of credits;
• every change to your credits — the free credits at sign-up, a download or the editor (with the conversion's first characters, which open nothing, and its kind, such as “photo”), a change by us — with its time and the balance after; kept as long as the account, deleted with it;
• which conversions you downloaded, or paid to open in the editor (their ID and when), so that doing it again costs nothing; deleted after 24 hours;
• your sign-ins: for each, only a hash of the key in your cookie (section 7) and when it ends, after 30 days or when you sign out;
• that your mailbox has had the free credits: a hash of your email address, made with a secret key of ours (HMAC-SHA-256), and with Google sign-in one of your Google account's ID. For this alone the address counts without anything after a “+” and, at Gmail, without dots, because such addresses reach the same mailbox. Without our key the hash shows neither the address nor the ID; it only tells us whether the same mailbox has had an account before;
• if we block your account (for example after abuse): that it is blocked, since when, and our reason;
• the changes we make to your account by hand — credits given or taken, blocking, signing you out, deleting — in a log of our own: when, what, your email address, the value before and after, and our reason.

When you sign up we email you a link. The account exists only once you open it and choose its password there. A sign-up never confirmed (only the address) is deleted after 24 hours. A link to reset your password works for an hour. We send these emails from our mailbox noreply@piclines.com at Hetzner in Germany (section 2).

During the beta you pay nothing, and we process no payment details. Before that changes, we will add it to this page.

The legal basis is Art. 6(1)(b) GDPR: without an account we cannot assign downloads and credits to you.

How long, and how to delete your account

Your account stays until you delete it. You do that yourself under "Your account" → "Delete the account", or by writing to support@piclines.com. We then delete the account, its credit history, its sign-ins and open links at once. It remains in the server's backups (section 2) for at most seven days, then nowhere. Your conversions are deleted after 24 hours anyway.

Only the hashes of your mailbox and Google account stay, for 12 months after the account is deleted, then they are deleted too. So the free credits go once to each mailbox, not again with every new account. The legal basis for that is Art. 6(1)(f) GDPR: our legitimate interest in preventing abuse of the free credits. You may object to it (section 10); we then check whether your interests outweigh ours.

Our log of changes to accounts keeps each line for 12 months, also after the account is deleted, then deletes it. With it we can show what we changed and why, and answer your questions about it. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in being able to account for changes to accounts and in preventing abuse. You may object to it (section 10).

6. Signing in with Google

If you choose "Continue with Google", your browser takes you to Google. There you sign in to Google and allow Piclines to learn your email address. Google then sends you back, and our server asks Google for exactly two things: your Google account's ID, and your email address if Google has verified it. We do not ask for your name, your picture or anything else. No Google script runs on our pages, and Google learns nothing about your pictures.

Google learns that you sign in to Piclines, and processes the data of your sign-in to Google (such as your IP address) under its own responsibility. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google's privacy policy applies: policies.google.com/privacy. Google may transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision.

The legal basis is Art. 6(1)(b) GDPR. Signing in with Google is optional: an account with an email address and a password can do everything the same. You remove the link between your Google account and Piclines at myaccount.google.com/connections.

7. Cookies and storage in your browser

We set no cookies for analytics or advertising, only these, without which you cannot sign in:

• Sign-in cookie (__Host-session): keeps you signed in. It holds a random key, is set only when you sign in, and lasts 30 days or until you sign out.
• Google sign-in cookie (__Host-google): only while you sign in with Google, holding check values for that sign-in; it lasts ten minutes.
• The Piclines Editor keeps its settings and the names of the files you opened last in your browser (localStorage), and its own program files (Cache Storage), so that it starts faster next time. It does not keep your drawings there. You can delete this in your browser for edit.piclines.com.
• While you are at Google, the page remembers in your browser's session storage (sessionStorage) which conversion you were looking at, so that it is there again afterwards. Your browser deletes this when you close the tab.
• The page keeps a list of your conversions of the last 24 hours in your browser (localStorage): each one's random ID, its file name and the time, so that "New picture" can show them to open again. Entries go after 24 hours. Of it, only the ID is sent to us, to ask whether the conversion is still there. You can delete it in your browser for piclines.com.

The legal basis for storing these in your browser is § 25(2) no. 2 TDDDG, because they are strictly necessary for the service you use; for what is processed afterwards, Art. 6(1)(b) GDPR. That is why there is no cookie banner.

8. No tracking, nothing from elsewhere

We use no analytics or tracking tools of other companies and show no ads. Our own numbers (section 3) are counts per day, made on our server, about no one. The page loads nothing from other servers: fonts, images and scripts come from ours.

9. Emails to us

If you write to support@piclines.com, your message lands in our mailbox at Hetzner in Germany (section 2). We use it to answer you and delete it once your request is settled, at the latest one year after our last message about it, unless the law requires us to keep it longer (business letters, for example about a payment: six years, § 147 AO). The legal basis is Art. 6(1)(b) GDPR when it is about your account or a conversion, otherwise Art. 6(1)(f) GDPR (our interest in answering questions).

10. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17), its processing restricted (Art. 18) and to data portability (Art. 20). Write to support@piclines.com.

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6(1)(f) GDPR (sections 3, 5 and 9), you may object at any time on grounds relating to your particular situation.

You may complain to a data protection supervisory authority. Ours is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

You do not have to give us any data. But without a picture we can convert nothing, and without an email address we cannot create an account. There is no automated decision-making within the meaning of Art. 22 GDPR.

11. Changes

We update this page when Piclines or the law changes. The version published here applies.

Last updated: 28 October 2026