Data protection impact assessment (DPIA): draft

Tool: pixelate.video Supplier: not stated (independent project; contact hello@pixelate.video; no limited-company name published)
School: [School to complete: school name] Prepared by: [School to complete: name and role] Date: [School to complete: date]

Draft generated by AI Prefect from the supplier’s published documents (checked 2026-11-06). A starting point only; not legal advice. Verify every fact before relying on it.

1. What the tool will be used for

Type of tool	on-device video and photo redaction (pixelate, blur or black-box faces, plates and screens in the browser)
Purpose in our school	[School to complete: what you will use it for, which year groups or staff, and why]
Who will use it	Supplier says pupil-facing: no - staff/adult browser tool for redacting faces and details before sharing; no pupil accounts (no sign-in) [School to complete: number and roles of users]
Personal data involved	[School to complete: e.g. staff names and emails; any pupil data; any special category data (health, SEND, safeguarding)? Avoid where possible]

2. How the supplier handles data

Processor or controller	not a processor of opened videos or photos (decode, face detection and export stay on the device); controller of website analytics and optional rating/error reports only
Where data is stored	opened media never leaves the device (browser IndexedDB and local storage only); site pages hosted by Cloudflare; optional Google Analytics may process visit data in the US under the EU-US Data Privacy Framework (can be turned off in Cookie settings or via Global Privacy Control); Cloudflare Web Analytics and Ahrefs Web Analytics (cookieless); ratings and error reports stored on Cloudflare Workers and Durable Objects
Trains AI on inputs	no - footage and photos never leave the device; face finding uses on-device MediaPipe BlazeFace served from the site; no account and no upload
How long inputs are kept	media and edit state stay in the browser (IndexedDB; leftover render fragments expire after seven days; up to 24 recent exports listed until cleared); optional rating notes kept up to 24 months; error reports 30 days (grouped summaries up to 180 days after last seen); Google Analytics visit retention 14 months
Data processing agreement	Not stated by the supplier. [School to complete: DPA reference or date signed] Signs individual DPAs: Not stated by the supplier. [School to complete: ask the supplier]
Supplier DPO / UK representative	not stated (contact hello@pixelate.video; UK GDPR rights described on the privacy page; no DPO or UK representative named)
Minimum age	Not stated by the supplier. [School to complete: minimum age]
Other safety notes	free browser tool with no signup; always review the export — tiny, distant or turned-away faces can be missed; light blur or small pixel blocks can leave faces and text readable (prefer black box or large blocks for IDs and plates); no school DPA or named company behind the site; Google Analytics on by default until turned off; not the same product as Ocucon Pixelate (cloud SAR redaction) or the mobile App Store Video Blur Editor - Pixelate
Lawful basis	[School to complete: e.g. public task (Article 6(1)(e)) or legitimate interests; Article 9 condition if special category data]

3. Risks and how we will reduce them

AI Prefect rating: staff Amber, pupils Red.

Risk	Suggested measure	Likelihood / severity	Residual risk
Data may be stored outside the UK/EU (Mixed)	Confirm the transfer safeguards (UK IDTA, standard contractual clauses or adequacy).	[School to complete: low / medium / high]	[School to complete: accepted?]
No data processing agreement published	Request a DPA before use, or limit use to non-personal data.	[School to complete: low / medium / high]	[School to complete: accepted?]
Minimum age: not stated	Check this against the age of any pupils who will use it.	[School to complete: low / medium / high]	[School to complete: accepted?]
AI output may be inaccurate or biased	Staff review all output before it is used; do not rely on it for decisions about individuals.	[School to complete: low / medium / high]	[School to complete: accepted?]
[School to complete: any other risks]	[School to complete: measure]

4. Sign-off

DPO advice	[School to complete: DPO comments and date]
Decision	[School to complete: approved / approved with conditions / not approved]
Approved by	[School to complete: name, role, date]
Review date	[School to complete: usually within 12 months, or when the supplier changes its terms]

Sources

https://pixelate.video/
https://pixelate.video/privacy
https://pixelate.video/about
https://pixelate.video/contact