← Petee

Privacy

Updated 4 November 2026 · ภาษาไทย

Petee (petee.co) is a shop of PETEE, the owner’s sole-trader business in France. This page covers, in every market, Petee accounts, Petee itself, the photo tools and how the shop is used, and everything in the shop in Thailand (petee.co/th); for orders in the United States (petee.co/us), that shop’s privacy policy adds what concerns them. It says what we do with your information and how to have it deleted. Questions or requests: hello@petee.co.

Your photos

While you design, your photos stay in your browser; designs in your bag are kept in this browser's storage so they are still there after a refresh, until you remove them or sign out. Photos leave your device only when you:

• add a photo with a background, or extend a photo: a copy of the photo, at most 1600 pixels (1024 to extend it past its edges), goes to our server, which has Runware, our image-processing provider, remove its background with the BiRefNet model (or paint in the missing edges with FLUX.1 Fill) and sends the picture back. The background is removed as the photo comes in, so Remove background shows it at once; your design does not change until you ask. If you are not signed in, our server keeps the cut-out for one day, so the same photo is cut out again at once, then deletes it; once you are signed in, it is kept only if you save the design to your account. If our server cannot help, the background is removed on your device instead;
• try a design on yourself, in the shop in Thailand, signed in and once you agree to it: your photo (of you alone, 18 or older) goes to our server, which sends it, with one of the gallery’s scenes and your design, to Runware, where Black Forest Labs’ FLUX.2 [klein] 4B model makes a picture of you wearing the design. Runware does not use it to train models. Our server keeps the picture made for an hour at most, for your account only, then deletes it, and keeps nothing of your photo; to hold the limit of 5 a day it keeps, for two days, a keyed fingerprint of your account (not the account itself) and a digest of the photo (a short code from which it cannot be rebuilt). Petee never publishes, shares or measures these pictures;
• ask Petee to draw your pet, in the shop in Thailand, when you ask for it: Petee draws only from a photo you have let it see (below), which it uses to pick the styles and to check that no person is in it; a photo with a person in it is refused before it is sent. A copy of the photo (at most 1280 pixels, without its location or other details) then goes to our server, which has Runware draw the designs with OpenAI’s GPT Image 2.5 models (Flare and Sunburst) or Google’s Nano Banana 2.1, with your pet’s name (letters only, 12 at most) when you choose a design that spells it. OpenAI and Google (United States) receive them through Runware to draw the design, do not use them to train their models, and may keep it for a limited time (OpenAI for up to 30 days) only to detect misuse. Our server keeps each finished design for a day so your page can fetch it, then deletes it; it does not keep the photo;
• save a design to your account: its photos and a small picture of it are kept on our server until you delete the design or your account;
• sign in with designs in your bag: the bag, its designs and their photos, is kept with your account so it follows you to your other devices, until you empty it or delete your account;
• order: at Check out, your design’s own pictures (your photos, cut-outs, text and drawings, as you placed them) are uploaded to our server. Once you have paid, our server draws the print files from them and shares them with our print and delivery partner to make and ship your order. First, each picture on it that would print at under 150 pixels per inch (your own photos and Petee’s designs alike) is sent automatically from our server to Runware, which enlarges it 2 or 4 times with the SwinIR model; nothing is generated or added to the picture. The enlarged picture goes only into the print file. The uploaded pictures are deleted once the print files are drawn, or after an hour if you do not order (a PromptPay order never paid, after 7 days and an hour, so that a late transfer can still be printed); the print files are kept for 90 days after payment, for reprints and complaints.

Removing backgrounds and extending photos are free, a few times a day, and Petee draws designs only for a Petee account, 3 free for each account, more with kibbles (below). If you use a photo tool without signing in, the first time our server sets a cookie with a random, signed number (pp_visitor, under Cookies) and keeps that day’s counts with it for two days, then deletes them; for the photo tools nothing else is linked to it: no account, no network address, no photo. So that Petee’s drawing limits hold, our server keeps with each request to draw, for two days, keyed fingerprints of your account and of your network address (not the account or address themselves), and a digest of the photo (a short code worked out from it, from which the photo cannot be rebuilt), then deletes them. With your account it also keeps how many of the free designs you have used, under the same keyed fingerprint, for as long as the account: deleting the account deletes it. Against bots, our server also counts the requests from each network address in an hour and in a day, and forgets the count once the day is over.

Your account

An account is optional. Depending on how you sign in we keep: a passkey’s public key (your face, fingerprint and screen lock never leave your device); your Google account number, name, email address and profile picture (Sign in with Google: we ask Google only for these, and keep a copy of the picture to show in the top bar); or your email address (sign-in codes by email). So that no one can guess a code, our server counts the wrong codes typed for an email address for two days, under a fingerprint of the address (not the address itself): ten in a day stop codes for it for a day. We also keep your saved designs, which orders are yours (placed signed in or in this browser, or paid with one of your account’s email addresses given at checkout, whose delivery details you then don’t see) and your kibbles (below). A cookie keeps you signed in for up to 90 days. Your account is a Petee account: one sign-in for every Petee market on petee.co, which is why its cookie belongs to petee.co.

While the shop in Thailand is not yet taking orders, you can ask, signed in, to be told when it opens. We then keep that request with your account, with the account’s confirmed email address and the page’s language, and send one email when orders open, with a link back to your bag. The request is deleted once that email is sent, when you tap “Don’t email me”, when you delete your account, or after a year if the shop has not opened; it is used for nothing else.

Delete your account any time: My account → Delete account. It erases the account, its ways of signing in, its saved designs and their photos, and its kibbles with the record of its balance at once, in every Petee shop. Orders already placed and kibble packs bought (each pack’s amount, kibbles, payment method, payment reference and dates) stay in our records for accounting, no longer linked to you. The record that you opened one of Petee’s presents (below) stays until its month is up, and the one that you had the first bag’s discount stays for as long as Petee offers that discount. Whatever is deleted also leaves our private daily backups within 14 days (kept on our server and, encrypted so that only we can read them, with Cloudflare).

Petee, the design buddy

Petee, the shop’s cat, is on every page; playing with it stays on your device. You can chat with Petee for free, a number of messages a day (more once you sign in). When you do, what you type or say to Petee and a short description of the studio (the product, colour, size and how many photos are on it) go to our server and to Anthropic, whose Claude model writes Petee’s replies under Anthropic’s commercial terms. Petee sees a photo only if you say yes when it asks (you can change your mind in Petee’s menu): then a small copy of each photo you add (at most 1024 pixels, without its location or other details) goes too, so Petee can suggest designs made for it, as does a small copy of a picture in the chat you reply to (such as your pet cut out). Our server keeps the conversation, with those copies, for a day if you are not signed in, or 30 days with an account (so Petee remembers it on your other devices), and deletes it with your account. Petee’s menu starts a new chat at any time (Petee starts afresh; your earlier chats stay above it for the same time, so you can read them back) and clears all your chats at once. Talking to Petee uses your device’s own speech recognition (Apple’s on iPhone, Google’s on most Android phones), under its provider’s terms; we receive only the words. Before you sign in, a cookie counts your free messages for a day, and keeps your chat with Petee if you then sign in. To keep Petee for people and within what it costs us, a second cookie holds a random number for your browser (for a little over a year), and with each message your browser’s type and languages and whether you tapped or typed on the page are checked (not kept); our server keeps, for 31 days, which browsers, accounts and network addresses talked to Petee together, as keyed fingerprints that are not the addresses themselves, and how much each spent. That record of spending (for your browser and your email address) stays for its 31 days even if you delete your account.

Petee’s presents. Being kind to Petee fills a meter kept on your device (how the shop is used, below, counts the kinds of kindness, not you). You can open a present Petee gives you before signing in; using what is inside needs an account with an email address (Google’s, or one you confirm with a code). Until then our server holds what you drew under a random number kept in a cookie (petee_held, under Cookies): which present, the accessory or discount drawn and when, nothing about you, until you sign in and claim it, or for 30 days. So that opening it again draws the same thing, our server also remembers each present’s draw for your network (your IPv4 address, or the first 48 bits of an IPv6 address) until the end of the month (UTC), under a keyed fingerprint of that network (not the address itself), then deletes it. We keep the discount you got (5%, 10% or 15%) with your account for its 24 hours (removed within 30 days after), and, so that each person gets one present a month, a keyed fingerprint of your account’s email addresses with the time you opened it, for a month. The fingerprint cannot be turned back into your address; it stays for its month even if you delete your account (the discount goes with the account). At your first Add to bag while signed in, Petee gives a 5% discount on your first order, good for 7 days, once per person: we keep it with your account for its 7 days (removed within 30 days after) and, so that each person has it once, the same kind of fingerprint of your account’s email addresses with the time, kept for as long as Petee offers this discount, even if you delete your account. A present sometimes holds an accessory for Petee instead, and each paid order you place while signed in brings Petee one: they are kept with your account (with which order brought which), with the one Petee wears, until you delete the account.

How the shop is used

To find what is hard to use or broken, we measure how the shop is used with PostHog: the pages you open, what you tap (rapid repeated taps included), the steps you take in the studio and with Petee (never the words you write or say to it), errors you run into, how fast pages load, your device and browser type and your approximate location (from your network address), and, for about one visit in ten, recordings of the screen as you use it. Recordings never show what you type into a field, Petee’s chat, your name or your email, your own photos do not appear in them, and they leave out the browser’s console. A random identifier in a cookie and in this browser’s storage links your visits; when you sign in we add only a code made from your account (never its number, your name or your email address), so we can help if something goes wrong. Your sign-in cookies are never sent to PostHog. We keep this data for up to a year. On Petee France (petee.co/fr) we measure without cookies: nothing is kept on your device, there are no screen recordings and no location, and you are never identified, even when signed in; PostHog counts visitors with a code worked out each day from your network address and browser, without keeping the address.

Orders

To deliver an order we need the recipient’s name, phone number and address (and an email address if you give one, which gets the order’s news (in Thailand its payment received, its printing, its shipping with the tracking number and its delivery; in the United States and France its tracking) and one request to rate it: Reviews, below). Until the order is paid, this browser tab also keeps the recipient’s details you typed, in the browser’s own storage, so they are still there when you come back from paying; they are sent nowhere else, are gone when you close the tab, and are deleted once the order is paid. Payment is handled by Stripe; we never see card numbers. In Thailand, you can instead pay by PromptPay: your bank app transfers the total to the owner’s own account (it shows the owner’s name), the owner checks the transfer in that account, usually within a day, and the order records only that it was paid by PromptPay, the amount, when, and when it was refunded if it is. An order not paid within 10 minutes expires; a transfer that arrives up to 7 days later can still be accepted. To refund a PromptPay payment, the owner asks you for a PromptPay number to send it to, and keeps it only until the refund is made. A paid order’s delivery details (the recipient’s name, phone number, email and address, and its parcel’s journey and delivery photos’ links, as its carrier gives them) are kept for 2 years after it is delivered or cancelled, for reprints, refunds and guarantees, then deleted; the rest of its record (what was bought, the amounts, payment and refunds), like a kibble pack’s, is kept for accounting until 10 years after the end of the year it was placed in, then deleted. An order never paid (a PromptPay transfer that never came, a card payment left unfinished or declined) is deleted entirely, its delivery details with it, 8 days after it ended.

Friends testing the shop before it opens: the owner gave us your email address with your agreement, so checkout is open to your Petee account signed in with it. It stays on a list on our server until the test ends or you delete your account, which takes it off. If your test includes a free piece, we also keep a keyed fingerprint of the address (never the address) for as long as the shop runs, so the free piece is given only once.

Kibbles

In the shop in Thailand, kibbles pay for Petee’s drawings beyond the free ones; buying them needs a Petee account. A pack is paid apart from your bag, by card on Stripe’s own checkout page or by PromptPay. On Stripe’s page, Stripe asks for your payment details and an email address for its receipt, and we send Stripe nothing about your account (no account number, no email address). By PromptPay, the price is transferred as an order’s total is (above), and the kibbles are added once the owner has checked the transfer, usually within a day; a pack not paid within 10 minutes expires, late transfers being handled as for orders. With your account we keep Stripe’s references for a card payment, or the transfer’s amount, time and status for PromptPay, the pack’s price, currency and number of kibbles, when you bought it, and each change to your balance (a pack added, kibbles for a review (taken back if its order is refunded), kibbles used for a design or given back, what is left of a disputed pack taken back); no name, email address, card or postal address. We keep them as long as your account: deleting it deletes your kibbles and these records, but each pack bought stays for accounting without your account (above), and Stripe keeps its own record of a card payment.

Reviews

For an order in Thailand, a day after our print and delivery partner tells us it has arrived, we send one email to the address given at checkout (your Petee account’s address when the order is in your account: placed signed in, in this browser before you signed in, or with one of its addresses given at checkout), in the order’s language, asking you to rate it; if the order is in your Petee account, the app asks too. The email’s link is your order’s own and works for 30 days without signing in, and no reminder follows. Its “Stop review emails” link stops them for any later order: we then keep a keyed fingerprint of the address (not the address) so as not to write to it again. If you rate the order, we keep with it your stars, your words and the name you chose to show (if any), the dates, whether we show your words or hid them and why, and whether you got your kibbles; your email address is not part of it. Your stars always count in the rating shown on petee.co. Your words are shown only if you choose, with the name you give or none, once we have read them; we hide words only if they are abusive, give personal details or are not about Petee, never because of the stars. Every rating gets the same free kibbles, whatever it says, as long as the order is not refunded or its payment disputed (if it is later, what is left of them is taken back); collecting them needs a Petee account. We keep a review for 3 years, then delete it; write to hello@petee.co to have yours taken down or deleted sooner.

Cookies

The cookies the shop needs to work: your shopping session, your account sign-in, for a few minutes a Google sign-in in progress, for a day, Petee’s free messages, for a year the language you chose and the country’s shop you last opened, so petee.co takes you back to it, and, if you use a photo tool without signing in, until the end of that day (UTC), pp_visitor, the random number that counts your uses (above), and, if you open one of Petee’s presents without signing in, for up to 30 days, petee_held, the random number your present is held under until you claim it (above), cleared once nothing is held; both are sent only to the shop’s server. One more cookie (and the same in this browser’s storage) keeps PostHog’s random identifier, above (not on Petee France). No advertising cookies.

Who helps us

• Cloudflare (United States): runs petee.co’s domain names and carries every request between your browser and our server, so it sees your network address, the pages you ask for and what your browser sends with them (cookies and forms included), in transit only. It keeps copies only of the shop’s public scripts, styles and pictures, never pages, your bag, your account or checkout; it receives the reports browsers send when a connection to petee.co fails; and it stores our encrypted backups (above). No Cloudflare analytics or scripts run on the pages.
• Hostinger: hosts our server.
• Runware: background removal, photo extending, enlarging pictures too small to print well when you order, Petee’s drawings of your pet and trying designs on yourself (in Thailand). What it receives comes without your name or account, and we ask it to keep each result no longer than a minute, the shortest it offers.
• OpenAI (United States): through Runware, draws Petee’s designs from your pet’s photo (above).
• Google: Sign in with Google; through Runware, draws some of Petee’s designs from your pet’s photo (above).
• PostHog (United States): measures how the shop is used, above.
• Anthropic: writes Petee’s replies (Claude), and sees the photos you choose to show Petee.
• Apple or Google: your device’s speech recognition, when you talk to Petee.
• Resend: sends sign-in codes by email, each order’s news to its email address (Orders, above), the one email asking to rate a delivered order, and the one saying the shop in Thailand is open, if you asked for it.
• Stripe: payments, kibble packs included.
• Kasikornbank (Thailand): the owner’s bank, which receives PromptPay payments with the sender’s name and account.
• KEX Express, the carrier, and 17TRACK (Singapore, its servers in the United States) for any other carrier: asked where a shipped parcel in Thailand is from its tracking number alone (no name or address), to show it in your account. Once a KEX parcel is delivered, KEX’s answer also links to the photos its courier took at delivery: we keep only the links, and our server fetches a photo from KEX only when you tap to see it in your account (the owner can also see it, for complaints); the photo itself is never copied or kept.
• Our print and delivery partner: making and shipping orders.

Your rights

You can ask us what we hold about you and for a copy of it, to correct it or to delete it, object to how we use it, or withdraw a consent you gave (what was done before stays lawful), under Thailand’s Personal Data Protection Act and, where it applies, the GDPR. Write to hello@petee.co. You can also complain to Thailand’s Personal Data Protection Committee or, in the European Union, to your data protection authority.