Privacy Policy

What this policy covers

4toWorks builds and runs PiCell One, a photo viewer, and this site (picell.4to.app). This policy covers the information handled in both places.

PiCell One works on your photos entirely on your own computer. Photo files and their contents, file names and folder paths, ratings and the results of your sorting are never sent to a server, and the developer does not collect them.

When the app checks for updates

The app asks the update server whether a newer version exists. The following travels with that request, and none of it is there to identify a person.

Device identifier

Your computer’s machine number, turned into a value that cannot be turned back. Recent versions of the app convert it on your computer before sending; older versions send the number itself, and the server converts it the same way the moment it arrives. Either way only the converted value is stored, and the original cannot be recovered from it. It exists so that one computer checking several times a day is counted once, and it is tied to no name, email or account.

App version and channel

The version you are running and whether you are on the stable or beta channel. Used to work out whether a newer build is available to you.

System and architecture

Windows or macOS, and 64-bit or ARM. Used to hand back an installer that will actually run on that computer.

Program string

The name and version the requesting app or browser reports for itself (User-Agent).

Country

A two-letter country code worked out from the IP address (KR, for example). The IP address itself is not stored — the country is taken from it and the address is discarded, leaving only the country in the record.

What arrives is used to decide the newest version for that machine, to decide staged rollout and forced updates, and for usage figures by version, system and country. The same items are recorded when an installer is downloaded.

When you use the site

Account

Signing in with Google passes on your email address, your name and the address of your profile image. What appears on the board is the nickname you choose and your profile image.

What you write

Reports, suggestions, reviews and comments, images you attach, poll answers and reports you file. A post marked private is visible only to its author and an administrator.

Notifications

Turning on browser notifications stores the subscription details needed to send them. Turning notifications off deletes those details with it.

The site uses Google Analytics to understand how it is visited. The pages you view, how long you stay, your approximate region, and your browser and device type are sent along with an anonymous identifier. This is never linked to your account or what you post, and is not used for advertising.

Cookies and browser storage

An authentication token is kept in your browser so that you stay signed in. Signing out removes it.

For visit statistics, Google Analytics sets a cookie that tells visitors apart (its name starts with _ga). Blocking cookies in your browser simply leaves you out of the statistics; the site works the same.

A few conveniences may also be kept in your browser alone — the language you picked, or the list you looked at last. These are never sent to a server.

Processors

The following providers supply the infrastructure needed to run the service.

Supabase

Board data storage, sign-in, running the update server

Cloudflare

Update server routing and installer delivery

Google

Google sign-in, site hosting and visit statistics (Google Analytics), delivery of browser notifications

Their servers may sit outside Korea, in which case the items above are transferred abroad and held and processed there.

Keeping and deleting

Posts, comments and attachments stay until you delete them or delete your account. Deleting your account deletes the posts, comments and attachments made with it.

Update checks and download records are kept to produce usage figures, and records that no longer mean anything as figures are cleared out.

Your rights

You may ask to see, correct or delete your information. Your nickname and profile can be changed straight from the account menu, and you can delete your own posts and comments yourself.

Send anything else to the address below and it will be checked, acted on, and the outcome sent back to you. One limit: the device identifier is tied to no account, so a request to delete the update-check records of a particular computer has to include that identifier before the records can be found.

Safeguards

Everything the app and the site send travels over an encrypted connection (HTTPS). The database is guarded row by row, so even a signed-in user can read and write only what they are allowed. Administrative functions are open only to accounts with administrator rights.

Children under 14

Information about children under 14 is not knowingly collected. Anything found to have been collected is deleted without delay.

Changes to this policy

When this policy changes, what changed and the date it takes effect appear on this page first. If a change adds something to what is collected, that fact is stated plainly in a sentence.

Contact

For anything about how your information is handled, write to 4to.app@gmail.com.