Privacy Policy

Pixhood — pixhood.art

Overview

Pixhood is an ephemeral collaborative pixel art map. We keep data processing to an absolute minimum. We do not collect, store, or sell personal data. There are no user accounts, no cookies, no tracking, and no third-party analytics.

Controller

Responsible for this service:

• Email: [email protected]

Data We Process

IP Addresses

When you use Pixhood, your IP address is temporarily processed server-side for:

• Rate limiting (preventing automated abuse)
• Connection limits (max 10 concurrent WebSocket connections per IP)

IP addresses are stored only in short-lived counters (1–60 minutes) and are never logged permanently or displayed to anyone. They are not correlated with any other data.

Anonymous Sessions

Each browser is assigned a random UUID stored in your browser's localStorage. This identifier is used solely for coordinating your paint actions in real time. It is not personal data and cannot be traced back to you.

Geolocation

If you grant permission, your browser's Geolocation API is used to center the map on your position. The geolocation itself stays in your browser — but the map area you view and the pixels you paint involve coordinates sent to our server (see below). We do not track your real-time position beyond what is needed to show you the map.

Map Viewport and Pixel Coordinates

To load and display pixels, the app sends your current map viewport bounds (latitude/longitude rectangle) to the server via HTTP and WebSocket. When you paint a pixel, its color and map coordinates are also sent. These coordinates represent areas on a public map — not personal location data — and are inherently tied to the content you create. They are not used to track or profile you.

Painted Pixels

Pixel colors and their map coordinates are stored server-side with a 24-hour expiry. After 24 hours they are automatically deleted. Pixels are public and visible to all users.

Data We Do Not Collect

• No user accounts or profiles
• No email addresses or names
• No cookies
• No tracking or analytics (Google Analytics, etc.)
• No third-party services or advertising networks
• No device fingerprints

Data Retention

• Painted pixels — deleted after 24 hours (Redis TTL)
• Paint logs (for abuse detection) — deleted after 24 hours
• Rate limit counters — expire after 1–60 minutes
• Session blocks — expire after 1 hour

Legal Basis (GDPR)

Processing of IP addresses for abuse prevention is based on legitimate interest (Art. 6(1)(f) of the GDPR). Processing of pixel data and anonymous session IDs is based on your explicit interaction with the service.

Your Rights

Under the GDPR you have the right to access, rectification, erasure, and objection regarding your personal data. Since we do not store personal data beyond ephemeral server-side counters, there is typically nothing to exercise these rights on. If you have concerns, contact us at the email above.

Third-Party Services

• Map tiles — loaded from CARTO (basemaps.cartocdn.com). Subject to CARTO's privacy policy.
• Hosting — frontend hosted on Cloudflare Pages, backend on Fly.io. These providers may process IP addresses as part of standard HTTP delivery.

Changes

This policy may be updated. The latest version is always available at pixhood.art/privacy.html.

Last updated: April 2026

← Back to Pixhood