PRIVACY POLICY

Account data: When you register, we collect your email address, chosen username, and a hashed password (stored securely via Supabase Auth — we never see your plaintext password).

Gameplay data: We store the pixel artwork you submit, your votes, XP points, streak count, badges, and battle participation history.

Usage data: We collect browser type, approximate location (country level), and pages visited via server logs. With your consent (see Section 5), we also use Google Analytics and the Meta (Facebook) Pixel to understand how the Service is used and to measure our marketing. These tools set cookies and collect data such as your IP address, device and browser information, and your interactions on the site. They do not load until you accept cookies.

Local storage: Your in-progress drawing is saved to your browser's localStorage (pa_pixels), along with your mute preference (pixlpit_muted) and your cookie-consent choice (pp_cookie_consent). This data never leaves your device unless you submit it.

We use your data to: (a) operate the daily pixel battle and display leaderboards and profiles; (b) send account-related emails (email confirmation, password resets); (c) prevent abuse and enforce our Terms of Service; (d) improve the game experience; and (e) with your consent, measure traffic and the effectiveness of our marketing using analytics and advertising tools (Google Analytics, Google Ads, and the Meta Pixel).

We do not sell your personal data. We only use advertising and analytics tools after you accept cookies, and you can reject them at any time.

Your username and submitted artwork are public — they appear on leaderboards, the Hall of Champions, and your profile page.

Your email address is never displayed publicly.

We share data with the following sub-processors only to the extent necessary to operate the Service:

• Supabase — database, authentication, and file storage (EU/US servers).
• Vercel — hosting and edge network.
• Resend — delivery of account and battle notification emails.
• Google LLC — analytics and advertising measurement (Google Analytics, Google Ads), loaded only after you accept cookies.
• Meta Platforms, Inc. — conversion and audience measurement (Meta Pixel), loaded only after you accept cookies.

We may disclose data if required by law or to protect the rights and safety of our users.

We retain your account data for as long as your account is active. If you delete your account (see Section 7), we delete your profile data within 30 days. Anonymized gameplay statistics may be retained indefinitely for game balancing purposes.

Essential cookies: A session cookie set by Supabase Auth keeps you signed in. These are required for the Service to work and are always on.

Analytics & advertising cookies: Only after you accept, Google Analytics (e.g. _ga) and the Meta Pixel (e.g. _fbp) set cookies used to measure usage and marketing, including cross-site measurement by Meta. These do not load until you choose “Accept” on our cookie banner.

Your choice: On your first visit, a banner lets you Accept or Reject non-essential cookies. We remember your choice in your browser (pp_cookie_consent). To change it, clear that value (or your site data) and reload. You can also clear cookies anytime via your browser settings, which will sign you out.

Passwords are hashed using bcrypt via Supabase Auth and are never stored in plaintext. All data is transmitted over HTTPS. We apply row-level security policies in our database so users can only access their own private data. However, no system is 100% secure — use a unique, strong password.

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your account and associated data; export your data in a machine-readable format; object to certain processing.

To exercise any of these rights, email support@pixlpit.com with “Privacy Request” in the subject line. We will respond within 30 days.

PixlPit is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If we learn we have collected such data, we will delete it promptly. If you believe a child under 13 has registered, please email us at support@pixlpit.com.

We may update this Privacy Policy from time to time. We will notify registered users by email and post the revised policy here with a new effective date. Continued use of the Service after the effective date constitutes acceptance.

Privacy questions or requests: support@pixlpit.com

General support: support@pixlpit.com