Privacy Policy

Who we are

Pixeltron is operated by Pixeltron, Inc., a Delaware corporation with business operations in Florida, United States. Pixeltron, Inc. is the data controller (the organization responsible) for the personal data described in this policy.

Mailing address: Pixeltron, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

Privacy questions and requests: privacy@pixeltron.ai. Messages sent to support@pixeltron.ai also reach the team. Our services are hosted on Amazon Web Services in the United States (us-east-1 region).

Scope

This policy covers the Pixeltron website at pixeltron.ai, the Pixeltron Android and iOS apps (which present the same web platform inside a native shell), games hosted on Pixeltron, embedded Pixeltron players on other sites, the Pixeltron creator tools, the AI assistant, multiplayer and voice chat, Coins and cash rewards, Studio Credits and subscriptions, and the advertiser tools.

It applies to players, creators, advertisers, visitors who browse without an account, and people who contact us. Advertisers also agree to the Advertiser Policies, and creators who receive payouts agree to the Rewards, Credits, and Payout Terms. Those documents describe the services; this policy describes the data.

Games published by creators may contain content the creator made. Creators do not receive personal data about the people who play their games beyond aggregate, non-identifying statistics.

This policy is written in English. Translated interface text is provided for convenience; the English version governs.

What we collect

Account data (from you). Email address, display name, optional avatar image, optional public handle, preferred language, date of birth and the age bracket it gives (under 13, 13 to 17, or 18 and over), country, profile visibility choice, and game interests you select. If you sign in with Google or Apple we receive your name, email address, and the identifier the provider assigns to you. If you set a password we store only a one-way hash of it, produced with scrypt. If you enable two-factor authentication we store your authenticator secret in encrypted form, and for passkeys we store only the public key.

Terms acceptance evidence (from your device). Which policy versions you accepted, when, and the browser or device user agent that accepted them.

Gameplay activity (from your device and our systems). Which games and versions you played, when, how long, scores, pauses, results, verification and fraud signals, platform and device class, and the country, region, and city that our content delivery network derived from your connection at the time. For accounts aged 13 to 17 we keep only the country, for gameplay, device and ad records alike. Guests who play without an account are recorded against an anonymous identifier rather than a name.

Device install records (from the apps and browsers you use). Platform, app version, operating system version, device class, language, and country, region, and city (country only for accounts aged 13 to 17). A hashed version of your mobile advertising identifier is recorded only if you have given consent in your device and account settings; the current apps do not request that permission.

Advertising events (from your device and our systems). Which ads were requested, shown, viewed, completed, skipped, or clicked, the placement and format, platform, and country. These are tied to your account if you are signed in or to an anonymous identifier if you are not.

Content you create (from you). Games, game versions, cover art, uploaded images and video, prompts, comments and replies, chat messages, votes, feedback, reports you file, tips you send, and creator profile text. Uploaded media carries a content hash, source information, rights statements you make, and moderation status.

AI assistant and building conversations (from you). The messages you send to the Pixeltron assistant and the build tools, the replies, and the actions taken on your game.

Notification records (from our systems). Which notifications were sent to you, on which channel, when, whether they were delivered, and, for a short period, the rendered text of emails we sent.

Phone notification tokens (from your device). If you turn on phone notifications in the Pixeltron app, we keep a notification token for your device so we can send the alerts you chose, such as new messages, party invites and friend requests. Google and Apple deliver these alerts for us. We delete the token when you sign out on that device or close your account, and you can turn notifications off at any time in Settings.

Purchases, credits, and rewards (from you and our payment providers). Studio Credit purchases, subscription status, campaign funding, Coins earned and spent, streaks and achievements, and, for creators, earnings balance and payout requests. We receive transaction identifiers, amounts, tax and status from Stripe (and, if the apps sell anything in future, from the Apple App Store and Google Play). We never see or store your full card number.

Payout accounts (from Stripe and you). For creators who set up cash payouts: the Stripe Connect account identifier, its status and outstanding requirements, the country, the email used for the account, and a salted one-way fingerprint of the payout destination that lets us apply reward limits per payee. Identity documents, bank details, and tax forms are collected and stored by Stripe, not by Pixeltron.

Advertiser business details (from you). Business name, legal name, website and domain, contact email, industry category, verification evidence you submit, campaigns, creatives, budgets, and billing history.

Technical and security data (from your device and our systems). Session tokens, a hashed form of the network address attested by our content delivery network, used for rate limiting and abuse prevention, request timing, and error records. Pixeltron does not store raw IP addresses.

Support and contact data (from you). Anything you include when you email us or use an in-product report or feedback form.

What we do not collect. Precise GPS location, contacts, photos other than files you choose to upload, biometric data (device biometrics unlock a locally stored credential and never leave your device), voice recordings, government identification, or bank account numbers.

How we use information

Each purpose below lists the legal basis we rely on for people in the European Economic Area, Switzerland, and the United Kingdom. Where a purpose lists more than one basis, the first is the primary one.

Providing the service you asked for: creating and securing your account, running games, saving progress, showing your creations, delivering notifications you have not turned off, processing purchases, crediting Coins and rewards, and paying creators. Basis: performance of a contract with you (GDPR Article 6(1)(b)).

Keeping the platform safe: age gating, content moderation, fraud and abuse prevention, rate limiting, protecting the rewards economy, investigating reports, and enforcing our terms. Basis: our legitimate interests in a safe and honest service (Article 6(1)(f)), and legal obligations where they apply (Article 6(1)(c)).

Showing and measuring ads: choosing contextual ads based on the game and surface you are on, capping how often you see the same ad, confirming that an ad was actually viewable, paying creators and rewarding players for verified views, and reporting aggregate results to advertisers. Basis: our legitimate interests in funding a free service (Article 6(1)(f)). Personalized or demographic ads are shown only to adults who opt in. Basis: your consent (Article 6(1)(a)), which you can withdraw at any time in Privacy and Ads settings.

Aggregate geographic measurement: counting plays and ad views by country, region, and city, without identifying anyone, so creators and advertisers can see where a game is popular. Basis: our legitimate interests (Article 6(1)(f)). Location is never used to choose an ad unless you have separately opted in. Plays and ad views from accounts aged 13 to 17 are counted by country only.

AI features: answering your questions, building and editing games, generating cover art and the images, sprites, animations, videos, sound, music, and speech you ask for, making premium characters from a picture you choose, translating your game's text, and scanning content for safety. Basis: performance of a contract for the features you use (Article 6(1)(b)) and our legitimate interests in safety scanning (Article 6(1)(f)).

Improving the service: understanding which features are used, fixing errors, and testing changes. We do this with our own systems and aggregate reports. Basis: our legitimate interests (Article 6(1)(f)).

Communicating with you: transactional email about your account, security, purchases, moderation decisions, and payouts. Basis: performance of a contract and our legitimate interests. Moderation and security messages cannot be turned off; other categories can be managed in Notification settings.

Complying with law: tax and financial record keeping, responding to lawful requests, and protecting the rights and safety of users and others. Basis: legal obligation (Article 6(1)(c)) and legitimate interests (Article 6(1)(f)).

We do not make decisions with legal or similarly significant effects on you based solely on automated processing. Automated fraud, viewability, and moderation checks can hold a reward, ad payment, or piece of content; a person reviews holds that are disputed through the appeal path in the product.

We do not sell personal data, and we do not use your data to train AI models.

Age and children

Visitors who play without an account are not asked their age. Until they sign up, they are shown only games rated for everyone and games that have not been rated yet. When you create an account, Pixeltron asks for your date of birth on a neutral screen and stores it with your account; your age bracket is worked out from it, so a teen account becomes an adult account on the 18th birthday. Until the account is created the date stays only in an encrypted cookie in your browser.

Under 13. Pixeltron is not directed to children under 13 and does not knowingly collect personal data from them. If the age question at sign-up shows that someone is under 13, no account is created and nothing beyond the bracket cookie is kept. If an existing account later declares an age under 13, the account is closed.

Ages 13 to 17. Teen accounts can play games, earn Coins, comment, text chat with friends and party members, join and host party voice chat with accepted friends in private parties, use the creator tools, including the assistant, buy plans, credits and premium characters, publish games and fund ads (on the web a parent or guardian completes the payment), with these restrictions: no cash rewards or payouts, and no personalized or demographic ads. Age ratings limit the games shown to teen accounts, and mature-rated games are hidden from them.

Adults. Accounts that declare an age of 18 or over have full access, including cash rewards (with a verified email in supported regions), voice chat, and the ability to opt in to personalized ads.

Parents and guardians. Pixeltron does not offer a parental consent flow at launch. If you believe a child under 13 has created an account or that we hold a child's personal data, email privacy@pixeltron.ai with the account email or handle. We will verify the request, close the account, and delete the data we hold, subject to the retention exceptions described below. This section is our notice under the United States Children's Online Privacy Protection Act (COPPA).

The age bracket is self-declared. We use it to restrict, never to widen, what an account can do.

Ads and measurement

Pixeltron serves ads itself. We do not load third-party advertising or analytics software into the site or apps, and no advertising network receives your personal data from us.

Ads are contextual by default. They are chosen based on the game or surface you are viewing, your language, and your country, not on a profile of you. Adults can opt in to personalized ads, demographic ads, and coarse location targeting in Privacy and Ads settings; each choice is off by default, recorded with the date and policy version, and can be withdrawn at any time. Teen accounts never receive personalized ads.

Frequency capping and measurement. So that you do not see the same ad too often and so that advertisers are billed only for real, viewable impressions, we keep a persistent anonymous identifier in your browser's local storage and a server-issued credential for guests, and we record ad requests, views, and completions against it. This identifier is not shared with advertisers and is not combined with data from other companies.

Reports to advertisers are aggregate and non-identifying: counts of impressions, views, clicks, and completions by country, placement, and format. An advertiser never receives a list of who saw an ad.

Rewarded ads. When an ad offers Coins or a cash reward, the reward is granted only after our servers verify the view. Client-reported completion is not enough by itself, which is why we keep viewability and fraud signals for these events.

Mobile advertising identifiers (Apple IDFA and Google Advertising ID) are not requested by the current apps. If a future version requests them, it will ask for your permission first, and only a hashed value will be stored.

AI features

The Pixeltron assistant, the game builder, image and cover-art generation, premium characters and premium 3D avatars, generated video and audio, content moderation scans, and automatic translation are powered by AI models run by third-party providers. When you use these features, the text you type, the game you are editing, and (for moderation) the content being reviewed are sent to the provider named below for processing.

Text models (assistant replies and game building) are hosted by Z.ai (Zhipu AI). Z.ai models also scan comments, images, and game content for safety, review advertiser creatives, and translate game text into other languages. Requests carry an opaque identifier for your account and the content needed to answer you. They do not include your name, handle, or email address.

Premium characters. You can make a premium character from a description alone, or from up to four pictures you choose, with or without a description. Before anything is made, a Z.ai model checks your description and each picture on its own, and, for a picture you made in Pixeltron chat, the prompt it was made from, for content we do not allow. If they name or show a famous character, the same model writes an original description inspired by it, which you see and can edit, and only that description is sent on, never that picture; the Improve button in the description box sends your words to the same model to rewrite them. What was accepted is then sent to the provider that makes premium characters where you use Pixeltron: OpenAI, which paints the character (as pixel art, or as a detailed three-quarter character, depending on the look you choose) that Pixeltron then animates, or PixelLab, which draws and animates it from one picture. OpenAI receives your description and your pictures, each resized to at most 1,024 pixels and, when there are two or more, combined into one contact sheet of at most 1,024 pixels; for a character made from a description alone it receives only your description and Pixeltron's own blank character template. A picture the check refuses as sexual content is sent to a Pixeltron moderator for review, with a copy of the picture, any description you added and, for a picture you made in Pixeltron chat, the prompt it was made from kept as moderation evidence; the picture stays in your Drive unless the moderator decides otherwise. A description sent without a picture that the check refuses as sexual content, or as asking for someone under 18, is sent to a moderator the same way, with the description kept as moderation evidence.

Premium character drafts. If you choose Save & exit while making a premium character, the draft (your description, the look you chose and the pictures you added, including photos from your device) is stored only in the browser on that device, for up to one day. It is deleted when it expires, when you sign out, or when another account opens the premium character page on that device, and nothing in it is sent to Pixeltron until you confirm.

Premium 3D avatars. Where Pixeltron offers them, a premium 3D avatar starts from a picture you choose, under the same rules and the same Z.ai check as a premium character. OpenAI then redraws the character from that picture, standing with its arms out, and a Z.ai model compares the redrawn picture with yours. Only the redrawn picture, flattened and with its file details removed, is sent to Tripo, which builds and rigs the 3D model; Tripo never receives your account identifier, your name, your original picture, or any description you add. A Z.ai model then compares pictures of the model with the redrawn picture before the avatar is ready. Pixeltron animates the finished model itself, and games never receive it.

PixelLab also draws the pixel-art sprites, characters, and sprite animations you ask for in Pixeltron chat or through Pixeltron's creator tools, and pixel-art images made while Pixeltron builds a game. It receives the text of the request, which Pixeltron's AI may write from what you asked for, and, for an animation, the image being animated.

ElevenLabs generates the sound effects, music, and speech you ask for in Pixeltron chat or through Pixeltron's creator tools, and while Pixeltron builds a game. It receives the text of the request, which Pixeltron's AI may write from what you asked for.

BytePlus, ByteDance's cloud service, generates the short videos you ask for in Pixeltron's video tools, such as game promotion and ad videos. It receives the text of the request, which Pixeltron's AI may write from what you asked for, and any pictures, video clips, or audio you choose as a starting point or reference. It never receives your name, handle, or email address.

OpenAI's image model (GPT Image) makes and edits the images you ask for: game art, cover art, pictures in Pixeltron chat, and ad images. It receives the text of the request, which Pixeltron's AI may write from what you asked for, and, when you ask to edit or build on a picture, that picture. OpenAI also paints premium characters where Pixeltron uses it for that.

Each provider processes this data under a contract that limits use to providing the service to Pixeltron. Pixeltron does not allow providers to use your content to train their models. Assistant conversation transcripts are kept for 90 days so that you can continue a conversation, then deleted.

AI output can be wrong. Moderation scans can flag content that is fine and miss content that is not; a person reviews disputed moderation decisions. Do not enter passwords, payment details, or other people's personal data into the assistant.

Payments, rewards, and payouts

Purchases on the web. Plans, Plus, Studio Credit packs, premium characters, and Promotion (campaign budgets for creators and businesses) are processed by Stripe. We receive transaction identifiers, amounts, product identifiers, tax, and status. Card numbers and billing addresses stay with the payment provider.

Purchases in the apps. The iOS and Android apps do not sell anything today. If they do, purchases inside them will be made through the Apple App Store or Google Play, and we will receive the same kind of transaction record from them.

Coins are a non-cash reward. Earning and spending Coins creates ledger records tied to your account, including the gameplay session or ad view that earned them.

Cash rewards and creator payouts. Adults with a verified email in supported regions can accumulate an earnings balance. To be paid, a creator opens a Stripe Connect account. Stripe collects the identity verification, bank or card details, and tax information that the law requires, and Stripe is the controller for its own identity-verification processing. Pixeltron stores only the Stripe account identifier, its status and outstanding requirements, the country, the account email, and a salted fingerprint of the payout destination. Payout requests, transfers, holds, and reversals are recorded for seven years to meet tax and financial rules.

Fraud checks. Reward and payout decisions use server-side verification of gameplay and ad views, rate limits, per-payee limits, and anomaly holds. These are automated safeguards; a held payout is reviewed through the product's support path, not silently cancelled.

Sharing and service providers

We share personal data only with the service providers below, who process it on our instructions under written contracts, and in the limited other situations listed after them.

Amazon Web Services (United States): hosting, databases, file storage and content delivery.

Postmark (United States): delivery of transactional email. Receives your email address and the message content.

Stripe (United States, with entities in the EU and UK): payment processing, subscription billing, creator payout accounts, and identity verification for creators.

Z.ai / Zhipu AI: hosting of the text model used by the assistant and game builder; moderation scans, creative review, and translation; and the check of the descriptions and pictures submitted for a premium character or a premium 3D avatar, including the redrawn picture and pictures of the model. Receives prompts, game content, the content being scanned, reviewed, or translated, those descriptions and pictures, and an opaque account identifier.

PixelLab: pixel-art characters, sprites, and animations, including premium characters where Pixeltron uses PixelLab to make them. Receives the text of the request, which Pixeltron's AI may write from what you asked for, and, for a premium character or an animation, the picture being drawn or animated (a premium character's picture is resized to at most 1,024 pixels).

ElevenLabs: generation of sound effects, music, and speech. Receives the text of the request, which Pixeltron's AI may write from what you asked for.

BytePlus (ByteDance; servers in Singapore): generation of short videos. Receives the text of the request and any pictures, clips, or audio you choose as a reference, never your name, handle, or email address.

Google (United States): Sign in with Google.

OpenAI (United States): making and editing the images you ask for (game art, cover art, chat pictures and ad images), and, where Pixeltron uses OpenAI to make premium characters, painting them from the description and up to four pictures you choose (each resized to at most 1,024 pixels, and two or more combined into one contact sheet of at most 1,024 pixels), or from your description alone, and, for a premium 3D avatar, redrawing the character from the picture you choose, and, when you tap the mic in Pixeltron Bot chat, turning a short recording (at most one minute) into text; Pixeltron keeps neither the recording nor the text unless you send it. Receives the text of the request, any picture you ask it to work from and, for voice typing, the recording, never your name or email address.

Tripo: building and rigging premium 3D avatars. Receives only the redrawn picture of your character described under AI Features, never your account identifier, your name, your original picture, or your description.

Apple (United States): Sign in with Apple; App Store purchases and subscriptions in the iOS app.

Google Play (United States): purchases and subscriptions in the Android app.

LiveKit (United States): real-time transport for party voice chat. Audio passes through LiveKit's servers in real time and is not recorded or stored by LiveKit or Pixeltron.

Other people on Pixeltron. Your handle, display name, avatar, published games, comments, and creator profile are visible to other users according to your profile visibility setting. Leaderboards show handles and scores. Your friends, and the members of a party you are in, can see the premium 3D avatar you wear and its picture on Pixeltron's own pages, and you can hide it from them on your avatar page; people who are not your friends or in your party cannot see it, and games never receive it. Your friends can see whether you are online, away, in a party or in a game, which game, and when you were last online; you can turn on Appear offline in the Friends tab of chat. People you message in chat see your messages, handle and avatar. People you block can no longer message you, invite you or see your online status, and they are not told. Advertisers receive aggregate statistics only.

Business transfers. If Pixeltron is involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

Legal and safety. We disclose data when required by law, subpoena, or court order; to report suspected child exploitation to the National Center for Missing and Exploited Children or an equivalent body; or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Pixeltron, our users, or the public.

We do not sell personal data and we do not share it for cross-context behavioral advertising.

International transfers

Pixeltron is based in the United States and stores data there. If you use Pixeltron from outside the United States, your data is transferred to and processed in the United States and in the countries where our service providers operate.

For transfers of personal data from the European Economic Area, Switzerland, and the United Kingdom, we rely on the European Commission's Standard Contractual Clauses (with the UK International Data Transfer Addendum where applicable) with each provider, and on the EU-US Data Privacy Framework, the UK Extension, and the Swiss-US Data Privacy Framework where a provider is certified under them. We also assess whether additional safeguards are needed for each transfer. Copies of the relevant clauses can be requested at privacy@pixeltron.ai.

Requests to Z.ai / Zhipu AI are made from our United States servers and contain only an opaque account identifier and the content being processed, which for a premium character includes the picture you chose. Requests to Tripo are made from our United States servers and contain only the redrawn picture of your character, never an account identifier. Requests to BytePlus are made from our United States servers to its Singapore region and contain only the video request and the references you chose, never an account identifier.

Retention

We keep personal data only as long as needed for the purpose it was collected for, and then delete or anonymize it. The schedule below lists each record type, how long we keep it, and why.

Account profile (email, name, avatar, handle, settings): for as long as your account is open. When you close your account the profile is anonymized immediately, and remaining personal data is purged automatically about 30 days later, except for records listed below that we must keep.

Terms and policy acceptance evidence: for the life of the account and for the period needed afterwards to show what was agreed, because we need to demonstrate consent and acceptance.

AI assistant and build conversation transcripts: 90 days from the last message, then deleted, to let you resume a conversation.

Chat messages: party chat messages are kept for 7 days, and direct and group chat messages for 30 days, then deleted. You can delete your own messages while you're in the conversation; a deleted message disappears for everyone at once, and a private copy is kept only so it can still be reported, until the same period ends. If a message is reported, its text and the messages just before it are kept with the report, and messages our automatic checks flag as severe are kept the same way, under the moderation records rule below. When you close your account, your chat messages are deleted.

Gameplay sessions including city-level location: 13 months, after which the session is folded into aggregate statistics and the city is removed, for creator analytics and reward verification.

Ad delivery, viewability, and fraud records: for as long as they are needed for advertiser billing, disputes, reward verification, and fraud investigation, after which they are aggregated. Aggregated reports contain no identifiers.

Device install records: 13 months after the device was last seen, then deleted, for app compatibility and abuse prevention.

Rendered email bodies: 30 days, then deleted; the delivery record (recipient, subject, status, provider message identifier) is kept as an account record.

Problem reports you send with Report a problem (what you wrote, the screenshot you chose to add, and the technical details shown to you before sending: the page, app version and build, device, browser or app, language, the game you were in, and recent errors, never your chats): 12 months after you send them, then deleted, so we can find, fix, and tell you about the problem. They are included in your data download and deleted when you close your account.

Comments, published games, and uploaded media: until you delete them, subject to moderation holds, because they are content you chose to publish. If you close your account without deleting them, your games and comments stay in anonymized form, and so does media that a published game still uses; your other uploaded media is deleted when the rest of your personal data is purged.

Premium characters: until you delete them or close your account. The picture you chose stays in your Drive until you delete it there. Deleting a premium character in Pixeltron does not delete what OpenAI or PixelLab received to make it, which each keeps under its own retention terms. A premium 3D avatar's model and picture are kept until you delete the avatar or close your account, and are erased from storage a day after that. The review copies made while it is built (the redrawn picture, Tripo's preview, the pictures Pixeltron draws of the model to check it, and the model before it is finished) are kept for 30 days and then deleted; deleting the avatar deletes its redrawn picture at once. Deleting a premium 3D avatar in Pixeltron does not delete what Tripo received to make it, which Tripo keeps under its own retention terms.

Moderation records, reports, appeals, and safety evidence: for as long as needed to enforce our policies, handle appeals, and meet legal obligations. Evidence connected with a suspected child-safety case, including any report to the National Center for Missing and Exploited Children, is kept for at least one year after the case is closed, the preservation period United States law sets for those reports, and longer if a strike on the account still depends on it.

Purchase, credit, reward ledger, payout, and tax records: 7 years, because tax and financial rules require it. These records are retained after account closure.

Advertiser account and billing records: for the life of the advertiser account plus 7 years for financial records.

Rate-limit and security records (hashed network addresses, sign-in attempts): short-lived and expired automatically; security incident records are kept as long as the investigation requires.

Backups: encrypted database backups are kept for a limited rolling period and are overwritten on schedule. Data deleted from the live system may persist in a backup until that backup expires; we do not restore deleted personal data from backups except to recover from a failure.

Where the law requires us to keep a record for longer, or where a record is needed for an ongoing dispute or investigation, we keep it for that period only.

Your rights

Everyone can: see and update profile details in Settings; change ad, notification, and privacy choices in Settings; close their account in Settings (Close account, which requires a recent sign-in) or by emailing privacy@pixeltron.ai; and ask us for a copy of their data, a correction, or deletion by emailing privacy@pixeltron.ai.

European Economic Area, Switzerland, and United Kingdom. You have the right to access your personal data; to have it corrected; to have it erased; to restrict or object to processing, including processing based on legitimate interests; to receive the data you provided in a portable format; to withdraw consent at any time without affecting earlier processing; and not to be subject to solely automated decisions with legal or similar effects. You may lodge a complaint with your national supervisory authority (in the UK, the Information Commissioner's Office). We have not appointed an EU or UK representative at this time; contact privacy@pixeltron.ai for any request.

California. Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; to opt out of sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. Pixeltron does not sell personal information and does not share it for cross-context behavioral advertising, so there is nothing to opt out of; personalized ads on Pixeltron are opt-in and can be turned off in Settings. The categories of personal information we collect, and the purposes, are those listed in What We Collect and How We Use Information. We do not collect sensitive personal information as defined by that law other than account credentials, which we use only to sign you in. You may use an authorized agent to make a request; we will ask the agent for proof of your written permission.

Other United States states. Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws have similar rights of access, correction, deletion, portability, and opt-out of targeted advertising and sales. We honour those rights for everyone, regardless of where you live. If we deny a request you may appeal by replying to our decision; we will respond to the appeal and tell you how to contact your state attorney general if you disagree.

Brazil, Canada, Australia, and elsewhere. Where local law gives you rights over your data, contact us and we will respond in line with that law.

How to make a request. Email privacy@pixeltron.ai from the address on your account, or use the in-app account controls. We will verify that the request comes from the account holder, usually by confirming the email address, and respond within 30 days (45 days for California requests, extendable once with notice). We will not charge for a request unless it is clearly excessive. We keep a record of the request and our response.

What deletion does. Closing your account anonymises your profile immediately: your email is replaced with an internal placeholder, your name and avatar are removed, your handle is retired and never reissued, your credentials and sessions are revoked, and your ad preferences are reset. Remaining personal data is purged automatically about 30 days after you close your account. Records we must keep for tax, payout, fraud, safety, or legal reasons are retained as described in Retention and are not used for any other purpose. Games and comments you made stay in anonymized form unless you delete them before closing, and so does media that a published game still uses; tell us if you want them removed as well.

Security

We protect personal data with encryption in transit (TLS) and at rest, one-way hashed passwords, encrypted two-factor secrets, single-use hashed tokens for email verification and password reset, signed and time-limited session tokens that can be revoked, role-based access controls for staff, step-up authentication for sensitive account actions, and audit logs for administrative and money-moving actions.

Creator-built games run in an isolated sandbox that is designed to keep them from reading your Pixeltron session or sending data to other servers.

No system is perfectly secure. If we learn of a breach that affects your personal data we will notify you and the relevant authorities as required by applicable law, without undue delay.

You can help by using a unique password, enabling two-factor authentication or a passkey, and signing out of shared devices. Report a security concern to privacy@pixeltron.ai.

Cookies and local storage

Pixeltron uses only first-party cookies and browser storage that the service needs to work. We do not use third-party tracking cookies, and no advertising or analytics company sets cookies through Pixeltron.

Session cookie (next-auth.session-token, marked Secure): keeps you signed in. Deleted when you sign out or after 7 days.

Age cookie (pixeltron_age_screen): an encrypted record of the date of birth and age bracket you gave when signing up, so you are not asked again. Kept for one year. Visitors who never sign up do not get this cookie.

Preference cookies (pixeltron-theme, pixeltron-locale, pixeltron-system-locale): your colour theme and language. Kept for one year.

Registration intent cookie: a short-lived, signed record that you agreed to the Terms during sign-up, consumed when the account is created.

Shell marker cookies (pixeltron_mobile_shell, pixeltron_tv_shell): tell the site that it is running inside the mobile app or a television app so it can adapt its layout and navigation. Contain only the platform name.

Local storage. The browser keeps an anonymous identifier used for ad frequency capping and measurement, your assistant interaction mode, cached game state for games you play, whether you have completed the desktop guest welcome and, in the mobile app, your choice to hide its guest welcome, the local date of the last welcome greeting and the last active time so return greetings appear at most once a day after a break, and whether you have seen the short first-launch tour. A premium character draft you save stays there for up to a day, as described under AI Features. These values stay in your browser and are not used to track you across other websites.

You can clear cookies and local storage in your browser at any time. Doing so signs you out, clears your preferences, and clears the saved age answer from that browser (your account keeps it). Because we set no non-essential cookies, no cookie consent banner is shown.

Changes

Each version of this policy has an effective date and a version identifier. The version you acknowledged when you created your account is recorded with your account.

If we make a material change, such as collecting a new category of data, using data for a new purpose, or adding a new category of recipient, we will notify you by email or with a notice in the product before the change takes effect and, where the law requires it, ask for your consent. Minor clarifications take effect when posted.

Previous versions are available on request at privacy@pixeltron.ai.

Contact

Pixeltron, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

Privacy requests and questions: privacy@pixeltron.ai. General support: support@pixeltron.ai.

When you write to us about your data, include the email address on your account so that we can verify the request. We do not need, and ask you not to send, a copy of an identity document unless we specifically request one.