Privacy Policy

Last updated 8 November 2026

We keep what it takes to run your account, your Pixels, your Pass and the games. Nothing more.
No ads, no ad trackers, no analytics cookies. We never sell your data.
Card details go straight to Stripe. We never see your card number.
You can see, fix, download or delete your data. Just ask, or use your Account page.

Who we are

Pixaplay (pixaplay.io) is one account for a family of browser games: Pecking Order, Rogue Defenders, Influence, and more on the way.

Pixaplay is run by [COMPANY NAME], [POSTAL ADDRESS], [COUNTRY] ([COMPANY NUMBER]). We decide how your data is used, so under data-protection law we are the "controller".

Questions about your data? Write to [email protected] [CONFIRM ADDRESS].

[EU / UK REPRESENTATIVE: name and address, only if we are based outside the EU or UK. Otherwise remove this line.]

What we keep

Your account

Username. Other players see it (friends lists, chat, parties).
Password. Only as a one-way scrambled hash. Nobody, us included, can read it back.
Email, if you add one. It's optional. We use it to let you sign in with it, to send password-reset links, and to tell you a game is out when you tapped Notify me on it. We only use an address after you confirm it.
When you joined, and your settings (like Appear offline and Mute invites).

Playing

Playtime: how long you played each game, per day, and when you last played. It powers Continue playing on every device, and shows us which games people enjoy.
Cloud saves for games that don't have their own server (Influence today): your save, so it follows you between devices.
Each game's own data. Every game also runs its own server with its own game data (for example your progress, items and in-game coins in Pecking Order), linked to your Pixaplay account id. This policy covers that data too.

Friends and chat

Friends, friend requests and the players you blocked.
Who's online. While you play, your friends can see you're online and which game you're in. This lives only in the server's memory, plus when you were last seen. Turn on Appear offline to hide it.
Parties and their chat live only in memory. When the party ends, they're gone.
1-on-1 chat with friends is stored, so you can read it later on any device.
Support requests. What you write to us and our answers, with the game and page you wrote from and your browser's name, so we can help. They're deleted with your account.
Reports. If someone reports a message, we keep that message with the chat around it (as it was), so a moderator can see what happened.

Pixels, the Pass and payments

Your Pixel wallet: your balance and a record of every change (bought, spent in which game, gifted, refunded).
Payments: what you bought, the amount, the currency and the date. Stripe handles the payment itself and tells us when it's done. We never see or store your card number.
Your Pass: whether it's active, when it renews or ends, and Stripe's ids for your subscription. If an admin gave you the Pass, we note that too.

Other

Notifications in your bell (a game launch, a gift) and the coming games you asked to hear about.
Push notifications, if you turn them on. For each device you turn them on on, the address your browser's push service gave it (Google, Mozilla, Apple or Microsoft deliver them), and which kinds you want (messages, invites, friends, news). A push says who messaged or invited you and the first words of the message; it's encrypted so the push service can't read it. Turn them off in your Account page or your browser's settings, and the address is deleted.
Moderation records: if your account is suspended, when and why. Admins can also add a short private note to an account. Every admin action is logged.
Technical data. Your IP address is used for a moment to stop people hammering sign-in and sign-up (it's held in memory, not saved). Our hosting and network providers keep short server logs, which can include IP addresses.

We don't ask for your real name, address, birthday, phone number or location.

Why we use it (legal bases)

To give you what you signed up for (contract): your account, sign-in across games, saves, friends, chat, Pixels and the Pass.
To keep things safe and fair (legitimate interests): stopping cheating, fraud and abuse, handling reports, suspending accounts that break the rules, and keeping the service running.
To make the games better (legitimate interests): playtime totals tell us which games people play, and how to share Pass money between games.
Pixaplay news (consent): only if you switch it on in your account, about once a month. Every one has a one-click unsubscribe link.
Launch emails (consent): only for a game you tapped Notify me on. Tap it again to stop, at any time.
Push notifications (consent): only on the devices you turned them on on, and only the kinds you picked. Turn them off at any time.
Because the law says so (legal obligation): keeping payment and tax records.

Where we rely on legitimate interests, you can object (see Your rights). We never use your data for advertising, and we don't make automated decisions about you that have legal or similar effects.

Cookies and browser storage

One sign-in cookie (pxp_session). It keeps you signed in for up to 60 days. Scripts on the page can't read it (HttpOnly), and it only goes to our own service. It's essential, so it doesn't need a cookie banner.
Short game passes. When you open a game, it gets a pass from us that lasts 15 minutes and says who you are. It's renewed while you play.
Little preferences in your browser (local storage): where you left the floating Pixaplay button, the games you opened lately. They stay on your device. Some games also keep their own settings or saves there.

No advertising cookies. No analytics cookies. No tracking pixels in our emails, and no click tracking on their links.

We share data only with companies that help us run the service, only what they need, and under contracts that protect it:

Stripe: payments and subscriptions. Stripe gets your payment details directly from you and is responsible for them under its own privacy policy.
SendGrid (Twilio): sends our emails (confirm your address, reset your password, launch news).
Railway: hosts our servers and database ([HOSTING REGION]).
Cloudflare: our domain's DNS and content delivery. It passes your connection on to us.
Google Fonts: our pages load their typeface from Google, which sees your IP address when it does.

Other players see your username, your online status (unless you appear offline) and what you send them. We may also share data if the law requires it, to protect players or our rights, or if Pixaplay changes hands (you'd be told first).

We never sell your data.

Data sent outside the EU and UK

Stripe, SendGrid, Railway, Cloudflare and Google are US companies, so your data may be handled in the United States. When it is, we rely on the EU–US Data Privacy Framework (and its UK extension) where the company is certified, or on the European Commission's Standard Contractual Clauses (and the UK addendum). Ask us for a copy.

How long we keep it

Your account, playtime, saves, friends and chat: while your account exists. Deleted within 30 days [CONFIRM] of deleting the account.
Sign-in sessions: up to 60 days. Email links: 48 hours (confirm) or 30 minutes (reset), and once used they're gone.
Party chat and online status: only while they last, in memory.
Reports: until the report is handled, then 12 months [CONFIRM], or longer if they're needed for an ongoing case.
Payments and the Pixel wallet record: as long as tax and accounting law requires, usually 10 years [CONFIRM for your country], even after the account is deleted.
Suspension records and the admin log: 3 years [CONFIRM], to keep the service safe.
Server logs: about 30 days [CONFIRM].

Your rights

Wherever you live, you can ask us to:

See the data we have about you (access).
Fix it if it's wrong (correction). You can change your email and password yourself on your Account page.
Delete it (erasure). You can delete your account from your Account page, or ask us. This removes your account and personal data, except what the law makes us keep (payment records). Your Pixels and your Pass end with it, and unused Pixels aren't refunded.
Take it with you (export), in a common file format.
Object to what we do based on legitimate interests, or ask us to pause using it (restriction).
Withdraw consent at any time, for example to launch emails.

Write to [email protected] from the email on your account (or tell us your username). We answer within one month. It's free. We may ask you to prove the account is yours.

Not happy with our answer? You can complain to a data-protection authority: where you live, or ours, [SUPERVISORY AUTHORITY].

Children

You must be at least [MINIMUM AGE: 13] to make a Pixaplay account. In some countries the age to agree on your own is higher (up to 16 in parts of the EU). If you're under that age where you live, a parent or guardian must agree first. [AGE OF CONSENT RULES: how a parent agrees]

Players under 18 need a parent's or guardian's permission to buy Pixels or the Pass.

If you think a child has made an account without the permission they need, write to us and we'll delete it.

Security

Passwords are stored only as strong hashes. Everything travels over HTTPS. The sign-in cookie can't be read by scripts. Each game gets its own short-lived pass and can't act for another game, and no game can change your Pixels on its own. Admin actions need a password and are logged.

No system is perfect. If something goes wrong that puts your data at risk, we'll tell you and the authorities as the law requires.

Changes to this policy

If we change this policy, we update the date at the top. For big changes, we'll tell you in the portal or by email before they apply.

Also see our Terms and Refund Policy.