Privacy Policy

Last updated: 17 July 2026

This policy describes how QAPixel handles data. Because QAPixel has no server of its own, most of your data never leaves your browser. Have a lawyer confirm the specifics for your jurisdiction.

1. Who is responsible for your data

The data controller is BS WebPortali, registered in the Republic of Serbia, tax ID (PIB) 114037970, registration number (matični broj) 67278178, registered address Belgrade, Republic of Serbia. Contact: support@qapixel.com.

2. The short version

QAPixel is a client-side Chrome extension. It has no back-end server operated by us. Your Figma token, your audit pairings, and your reports are stored locally in your browser and are not transmitted to us. We cannot see your designs, your token, or your QA results.

3. Data processed by the extension

Figma personal access token — you enter it in Options; it is stored in your browser's local extension storage and sent only to api.figma.com to fetch the design frames you request. It is never sent to us.
Audit pairings and reports — saved locally per page URL so you can re-audit. They stay on your device.
Licence key (Pro) — stored locally and sent to Gumroad's licence-verification API to activate and periodically re-validate your Pro status.

4. Data processed by this website (qapixel.com)

Essential cookies / local storage — used only to remember your cookie choice. See our Cookie Policy.
Embedded video — the demo video is served by YouTube in privacy-enhanced mode (youtube-nocookie.com). YouTube may set cookies only when you press play. This is governed by Google's privacy policy.
Server logs — our web hosting provider may process standard technical logs (such as IP address, browser type and timestamps) to serve and secure the site.

5. Payments

Pro purchases are handled by Gumroad, Inc. as merchant of record. When you buy, Gumroad collects and processes your payment and contact details under Gumroad's own privacy policy. We receive limited order information (such as your email and licence key) to provide support and validate licences. We do not receive or store your full payment-card details.

6. Legal bases (GDPR)

Where the EU/UK GDPR applies, we rely on: performance of a contract (providing the extension and Pro licence), legitimate interests (securing the site, preventing abuse), and consent (non-essential cookies, where applicable).

7. Sharing

We do not sell your personal data. We share data only with the processors needed to run the service — currently Gumroad (payments/licensing), our web hosting provider, and Google/YouTube (embedded video). Figma receives requests directly from your browser, not from us.

8. Retention

Extension data lives on your device until you remove the extension or clear it. Order and support records are kept as long as needed for legal, tax, and support purposes.

9. Your rights

Depending on your location you may have rights to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise them, email support@qapixel.com. You may also lodge a complaint with your local data-protection authority (in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection).

10. Children

QAPixel is a professional tool and is not directed to children under 16. We do not knowingly collect data from children.

11. Changes

We may update this policy; the “Last updated” date reflects the latest version.

12. Contact

For any questions or collaboration, get in touch at support@qapixel.com.