1. Who we are
Pixelands ("Pixelands", "we", "us", "our") is an online multiplayer game operated by an independent game developer. This policy explains what personal data the Pixelands game and this website collect, why we collect it, and what you can do about it.
For anything in this policy, including privacy requests, contact us at pixelandsgame@gmail.com. We are the data controller for the data described here.
2. The short version
Because privacy policies are long and you probably want the answer now:
| Question | Answer |
|---|---|
| Do you sell my data? | No. We have never sold personal data and we do not share it for advertising. |
| Do you show ads? | No third-party advertising SDKs are in the game. |
| Do you track me across other apps? | No. |
| Do I need to give you an email? | No. An email address is optional and is only used for verification and password resets. |
| Can I play without an account? | Yes — a guest account is created for you and is anonymous unless you register it. |
| Can I delete everything? | Yes. In-game, or via our deletion page. |
| Do you read my chat? | Not routinely. Chat is filtered automatically and reviewed by moderators when it is reported. |
3. What we collect
We collect only what the game needs to run, to keep accounts secure, and to enforce our rules. We do not ask for your real name, home address, phone number, date of birth, contacts, photos, or precise location, and we do not collect them.
One exception worth knowing about: if you buy something, our payment channel passes us limited order information which may include the name and email on your payment account. We do not ask for it and do not use it for marketing. See section 6.
3.1 Account data
- Username — chosen by you, and visible to other players.
- Password — stored on our servers so we can sign you in. It is never displayed back to you, shown to staff in the game, or given to anyone else.
- Email address — optional. Only used to verify your account and to let you reset your password. We do not send marketing email.
- Account creation date and current sign-in state.
- Country flag — if you choose to display one on your profile. This is a value you pick yourself; we do not derive it from your location.
3.2 Technical and security identifiers
- IP address — recorded when you connect. We keep a history of the addresses used by an account.
- Device identifier — a value that identifies the device or installation you play on.
These two are the backbone of account security and rule enforcement: they let us detect account theft, block ban evasion, and stop one person running many accounts to abuse the economy. We do not use them for advertising or profiling.
3.3 Gameplay data
- Your inventory, currencies (Gems, PixBits, quest tokens), levels and experience.
- Worlds you own or have locked, and the contents of those worlds.
- Character appearance and equipped cosmetics.
- Quest, achievement, fishing, mining and progression records, including leaderboard and tournament results.
- Guild membership, friends list, and pets.
- Trades and marketplace activity, including what was exchanged and with whom.
3.4 Moderation and anti-cheat records
- Action logs — a record of significant in-game actions (for example trades, item movements, and world changes), stored alongside the IP address and device identifier used at the time.
- Reports you file against other players, and reports other players file against you.
- Punishment records — mutes, bans, the reason, and the IP addresses and device identifiers associated with them.
This is the least fun category and the one we are least willing to give up: without it, duping, scamming and ban evasion are unanswerable.
3.5 This website
pixelands.com is a set of static pages. It sets no cookies, runs no analytics, embeds no third-party trackers, and does not require you to log in. Our web server keeps standard, short-lived request logs (IP address, page requested, timestamp) for security and troubleshooting.
4. Why we collect it
| What | Why | Legal basis (UK/EU GDPR) |
|---|---|---|
| Username, password | To create your account and sign you in | Performance of a contract |
| Email address | Account verification and password reset | Performance of a contract |
| Gameplay data | To save your progress and run the shared world | Performance of a contract |
| IP and device identifier | Security, anti-cheat, fraud prevention, ban enforcement | Legitimate interests |
| Action logs, reports, punishments | Investigating rule-breaking and keeping the game fair and safe | Legitimate interests |
| Purchase confirmations | Delivering what you bought and handling refunds | Performance of a contract; legal obligation |
Where we rely on legitimate interests, we have considered your rights and concluded that a game that cannot detect cheating or enforce a ban is not a game anyone wants to play. You can object to this processing — see Your rights.
5. Chat, worlds and other things you make
Pixelands lets you talk to other players and build things they can see. Anything you type in public chat, write on a sign, name a world, or build in a world is visible to other players and is not private.
- Chat passes through an automatic profanity filter.
- Messages, signs, world names and builds may be reviewed by moderators when reported, and retained as evidence attached to a report or punishment.
- You can report and block other players from inside the game. See our Community Rules for what we act on and how.
Do not put personal information about yourself or anyone else into chat, signs or world names.
6. Purchases
Pixelands is free to play and offers optional purchases, such as Gems and packs. Purchases are made through Ko-fi, at ko-fi.com/pixelands.
- We never see or store your card number, bank details, or billing address. Payment is handled entirely by Ko-fi and its payment processors.
- Ko-fi passes us the order details — what was bought, when, the transaction reference, and the message you wrote on the order, which is where you give us your in-game username so we know which account to credit.
- Depending on how you pay, that order information may also include the name and email address attached to your Ko-fi or payment account. We do not ask for these and we do not use them for marketing — only to match a payment to an account and to handle disputes.
- We keep a record of which product was granted to which account, so we can deliver it, show that it was delivered, and resolve disputes.
- Ko-fi's own privacy policy applies to the payment itself. They are an independent controller for the data you give them directly.
- All sales are final — see our Purchases and refunds page.
If Pixelands is later distributed through the Apple App Store, Google Play or Steam, purchases made in those versions will be processed by that platform instead, and we will update this section.
7. Who we share it with
We do not sell personal data, and we do not share it for advertising or marketing. We share data only in these situations:
- Other players see your username, character appearance, profile, guild, and public activity such as chat, trades and leaderboard placements. That is inherent to a multiplayer game.
- Infrastructure providers that host our servers and database process data on our behalf, under contract, and may not use it for their own purposes.
- Email delivery — if you supply an email address, our email provider transmits verification and password-reset messages.
- Ko-fi — our sales channel. They process your payment and pass us the order details. See section 6.
- Legal — where we are required by law, or where it is necessary to investigate fraud, protect our rights, or protect someone's safety.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account and gameplay data | As long as your account exists. Deleted when you delete your account. |
| Guest accounts never registered | May be removed automatically after a long period of inactivity. |
| Action and moderation logs | Up to 24 months, then deleted or anonymised. |
| Website server logs | Up to 30 days. |
| Purchase records | As long as required for tax, accounting and refund handling. |
| Ban records (identifier + reason) | Retained after account deletion — see the note below. |
One honest exception. If your account was banned, we keep a minimal record of the ban — the associated identifiers and the reason — even after the account itself is deleted. Without it, deleting your account would be a way to erase a ban and come straight back. This is the only data that survives an account deletion request, it is kept solely to enforce the ban, and it is never used for anything else.
9. How we protect it
- Your password is stored only as a bcrypt hash with a random per-password salt — never as readable text. Nobody at Pixelands can look up or tell you your password. If you forget it, we can only help you set a new one.
- Game traffic between the client and our servers is cryptographically signed to prevent tampering, and this website is served over HTTPS.
- Account data lives in a managed database that is not exposed to the public internet.
- Administrative tools are restricted to a small number of owner-level staff accounts and are additionally restricted by network address — they are not reachable from the open internet.
- Staff access to player data is limited to what moderation and support actually require, and administrative actions are logged.
- We take regular backups so that data can be restored after a failure.
No system is perfectly secure and we will not pretend otherwise. If we discover a breach affecting your personal data, we will notify affected players and the relevant authority where the law requires it.
Use a password you do not use anywhere else. If you reuse passwords, a breach of some unrelated website becomes a breach of your Pixelands account. We will never ask you for your password, and we will never send it to you — we cannot, because we do not have it.
10. Children
Pixelands is rated 12+ and is not intended for children under 13. Pixelands includes open chat with other players, player-to-player trading, and optional purchases, none of which are appropriate for young children.
- We do not knowingly collect personal data from anyone under 13, or under the minimum age of digital consent in your country if that age is higher.
- The game is not directed at children, is not enrolled in Google Play's "Designed for Families" programme, and contains no child-directed advertising.
- If we learn that an account belongs to a child below the applicable age, we will delete the account and its data.
Parents and guardians: if you believe your child has created an account, email pixelandsgame@gmail.com and we will remove it. Please include the username. We will not ask you for any additional personal information about your child beyond what is needed to find and delete the account.
11. Your rights and choices
Wherever you live, you can:
- Delete your account and data — from inside the game under My Account → Delete Account, or through our account deletion page.
- Ask what we hold about you, and get a copy.
- Correct anything inaccurate.
- Play without giving an email address, or remove one you previously added.
If you are in the UK, EU, or another region with comparable law, you additionally have the right to restrict or object to processing, the right to data portability, and the right to withdraw consent where we relied on it. If you are in California or another US state with a privacy statute, you have the right to know, delete, correct, and to not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under US state privacy laws.
To exercise any of these, email pixelandsgame@gmail.com from the address on your account, or contact us from within the game. We respond within 30 days. We may need to verify that you control the account before acting, to stop someone else deleting your things.
If you are in the UK or EU and you think we have handled your data badly, you may complain to your national data protection authority. We would rather you told us first.
12. Where your data is processed
Our game servers and database are operated in a single region, and support correspondence is handled by email. Because Pixelands is played worldwide, your data may be transferred to and processed in a country other than your own, including countries outside the UK and EEA. Where that happens for players in the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses. You can ask us for details.
13. Changes to this policy
We may update this policy as the game changes. The "last updated" date at the top always reflects the current version. If a change materially affects your rights or how we use your data, we will announce it in-game and on our Discord before it takes effect.
14. Contact us
Privacy questions, data requests, complaints, or anything else about this policy:
pixelandsgame@gmail.com
Related pages: Terms of Service · Community Rules · Delete your account