Privacy
Pixeldex collects only what it needs to run your account and the game. No advertising, no tracking, no data sold.
What is stored
- Your account: e-mail address, username, password (only as an Argon2id hash), language and preferences, and the 2FA secret if you turn it on.
- Your game: chests opened, pixel arts, pixels, achievements, profile showcase.
- Security: the browsers you are signed in on (IP address and browser name) and a security log (sign-ins, failures, changes to your account) with the IP address.
Why
To run your account and the game, to protect accounts (sign-in attempts, suspicious activity) and to send the e-mails your account needs. The legal basis is the performance of the service you sign up for, and our legitimate interest in keeping it secure.
How long
- Your account and game: until you delete your account (from My account → My data), then deleted for good.
- Signed-in browsers: 30 days after their last visit.
- Security log: 12 months; entries of deleted accounts are kept without anything that identifies you. Feed of big finds: 90 days.
Who else
Our host (see the legal notice) runs the server, in the European Union. E-mails are sent by Brevo (France). Passwords are checked against known breaches with Have I Been Pwned through k-anonymity: only the first 5 characters of a hash of your password leave the server, never the password.
Cookies and storage
- Session cookie, while you are signed in.
- "Keep me signed in" cookie (30 days), only if you tick the box.
- Language cookie (1 year), to open the site in the language you used last.
- Light or dark theme, kept in your browser (local storage), never sent to the server.
They are all needed for the site to work: no consent banner, no advertising or audience cookies.
Your rights
You can download all your data (JSON) and delete your account at any time from My account → My data. For any other request (access, correction, objection) write to us. You can also file a complaint with the CNIL.
Contact: pixeldex@9879.fr