Privacy Notice — Pixel•Boy

Last updated: July 23, 2026

Kylie Moore ("we", "us", "our") operates Pixel•Boy (the "Service") and acts as the data controller for personal data collected through the Service. This notice explains what we collect, why, and your rights.

1. Personal Data We Collect

Account data: email address, display name, avatar emoji, hashed authentication credentials, and (if you use Google sign-in) the profile information Google shares.
Gameplay data: games played, scores, credit balance and transaction history, subscription tier.
Technical data: IP address, browser type, device identifiers, and usage/telemetry needed to run the Service securely.
Support messages you send us.

Payment card details are collected and processed by Paddle, not by us — see "Data Sharing" below.

2. Why We Use It

To create and operate your account and provide the Service (legal basis: performance of a contract).
To display leaderboards and gameplay history (legal basis: performance of a contract).
To secure the Service and prevent fraud or abuse (legal basis: legitimate interests).
To improve our games and features (legal basis: legitimate interests).
To respond to support requests (legal basis: legitimate interests / contract).
To comply with legal obligations, including tax and accounting (legal basis: legal obligation).

3. Data Sharing

We share personal data only with the categories of recipients below:

Paddle — our Merchant of Record for all sales. Paddle processes payments, manages subscriptions, handles tax compliance, and issues invoices and refunds. See Paddle's privacy notice.
Service providers / subprocessors — hosting, database, authentication, and analytics providers that operate the Service on our behalf.
Professional advisers — legal, accounting, and similar advisers where necessary.
Authorities — where required by law or to protect our rights or the safety of others.

4. International Transfers

Some of our providers are located outside your country. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep account and gameplay data for as long as your account is active. If you delete your account, we delete or anonymise personal data within a reasonable period, except where retention is required by law (e.g. tax records) or to resolve disputes.

6. Your Rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, to withdraw consent, and to lodge a complaint with your local data protection authority. To exercise these rights — including deleting your account and associated data — use the DELETE ACCOUNT option inside the app or email kyliemoore904@gmail.com; we respond within one month.

7. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and row-level security on our database — to protect personal data. No system is 100% secure; please use a strong password and keep it confidential.

8. Cookies

We use essential cookies and local storage to keep you signed in and remember your case colour and audio preferences. We do not use third-party advertising cookies. You can clear cookies and local storage from your browser at any time.

9. Children

The Service is not directed to children under the age required to consent to online services in their jurisdiction. We do not knowingly collect personal data from such children.

10. Changes

We may update this notice. The "Last updated" date at the top reflects the most recent version.

11. Contact

For privacy questions, email kyliemoore904@gmail.com.