Privacy Policy

1. Data controller

Pixel Canvas is operated by individual seller Matthew Ideun Cho, who acts as the data controller for personal data collected through the Service and determines the purposes and means of processing.

2. Data we collect and why

• Account information (email, name, and unique ID from your Google account): sign-in and account creation — performance of a contract
• Canvas activity (position, color, and time of painted pixels, pixel balance, purchase records): providing the Service and crediting purchases — performance of a contract
• Technical data (IP address, browser and device information, usage logs): security, abuse prevention, service improvement — legitimate interests
• Support inquiries: customer support — performance of a contract and legitimate interests

We do not collect payment card details; our payment processor handles those directly.

3. Sharing

• Service providers (hosting, database, authentication provider Google, etc.)
• Paddle, our Merchant of Record: selling products, processing payments, tax compliance, and issuing receipts
• Professional advisers (legal, accounting)
• Authorities where required by law

We do not sell personal data. Pixels you paint are public on the shared canvas, but your name and email are never displayed.

4. Retention

Account data is kept while your account exists and is deleted or anonymized without undue delay when no longer needed or when you request deletion. Transaction records subject to legal retention duties are kept for the required period.

5. Your rights

Under applicable law you may request access, correction, deletion, restriction, portability, object to processing, and withdraw consent, and you may lodge a complaint with a supervisory authority. We respond to requests within one month.

6. International transfers

Our service providers may operate servers abroad; where so, we rely on appropriate safeguards such as standard contractual clauses.

7. Security

We apply appropriate technical and organizational measures, including encryption in transit and access controls.

8. Cookies and storage

We use only essential storage to keep you signed in — no advertising or marketing cookies. You can clear them in your browser settings, which will sign you out.