Picta

Privacy Policy

How we collect, use, and protect your personal information

Last Updated: March 12, 2026 Effective Date: March 12, 2026

1. Introduction

This Privacy Policy describes how Picta ("the Service", "we", "our", or "us") collects, uses, and protects information when you access or use the website.

A personal portfolio web application that allows users to authenticate using their Instagram account and visualize their Instagram media in an interactive infinite gallery environment.

By using the Service, you acknowledge and agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you authenticate with Instagram, we may collect and store the following profile information:

  • Name
  • Instagram username
  • Email address (if provided by Instagram)
  • Profile image URL
  • Profile metadata such as biography or website

2.2 Authentication and Session Data

To maintain secure login sessions we store:

  • OAuth access tokens
  • Refresh tokens (if applicable)
  • Session identifiers and expiration timestamps
  • IP address
  • Browser user-agent

This data is used solely for authentication and security purposes.

2.3 Instagram Media Data

With your permission, the Service retrieves data from Instagram using the Instagram API. This may include:

  • Photos and videos
  • Captions
  • Timestamps
  • Engagement metadata (likes or comments)

This information may be temporarily cached to render the gallery interface.

2.4 Automatically Collected Information

When you access the website, our servers may automatically record limited technical information including:

  • IP address
  • Browser type
  • Device information
  • Access timestamps

This information is used for security and operational purposes.

3. Legal Basis for Processing

We process personal data under the following legal bases:

  • User consent: when you authorize the application to access your Instagram account.
  • Legitimate interests: to operate, maintain, and secure the Service.

4. How We Use Your Information

The information we collect is used exclusively to:

  • Authenticate users through Instagram
  • Retrieve and display Instagram media
  • Render the infinite gallery interface
  • Maintain active login sessions
  • Ensure security and prevent abuse
  • Improve the reliability and performance of the Service

We do not sell or monetize personal data.

5. Third-Party Services

The Service relies on external providers. Infrastructure and APIs used by the Service include:

  • Meta Platforms (Instagram API)
  • Neon (PostgreSQL database hosting)
  • Vercel (application hosting)

These providers may process technical data necessary to operate the Service.

6. Data Retention

We retain user data only as long as necessary to provide the Service.

Account data and cached Instagram media remain stored while your account is active.

When an account is deleted or access permissions are revoked, associated data including cached media, authentication tokens, and sessions are permanently removed.

7. Data Security

We implement reasonable technical safeguards to protect personal information, including:

  • Encrypted HTTPS connections
  • Secure session cookies
  • Restricted database access

However, no system can guarantee absolute security.

8. International Data Transfers

Because our infrastructure providers operate globally, data may be processed on servers located outside your country of residence.

9. Your Rights

Under applicable data protection laws such as Argentina Personal Data Protection Law 25.326 you may have the right to:

  • Request access to your data
  • Request correction of inaccurate data
  • Request deletion of your data

Requests may be submitted through the contact information below.

10. Cookies and Sessions

The Service uses strictly necessary session cookies to maintain authentication and security.

These cookies are required for login functionality and are not used for advertising or tracking.

11. Children's Privacy

The Service is not intended for children under the age of 13. Users must have a valid Instagram account to authenticate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When changes occur, the "Last Updated" date will be modified.

13. Contact Information

For privacy questions or requests, please contact us at: