PixelPict Privacy Policy

Last updated: October 19, 2026.

Who is responsible for your information?

PixelPict is operated by Anh Tu Do, an independent developer based in Texas, United States ("I," "me," or "the developer"). I am responsible for deciding how PixelPict uses your personal information. Contact me at doanhtu07@gmail.com with privacy questions or requests.

This policy covers the PixelPict mobile game and its support and legal website. It explains the app's own data handling and the third-party services used to operate it. It is a notice about data practices, not a request for consent to every use described here. Where consent is required, it must be obtained separately.

The short version

• You can play without creating a PixelPict account. Guest coloring progress stays on your device, but online requests and third-party SDKs can still process information.
• Signing in enables account-based progress sync through Convex.
• The free game includes ads, and PixelPict Plus is an optional one-time purchase managed with RevenueCat and your app store.
• You can delete your account in the app or request deletion by email. A minimal account-deletion marker is retained temporarily to prevent deleted progress from being restored, then removed automatically as explained below.
• PixelPict is intended for people aged 13 and older and is not directed at children under 13. Additional protections and consent requirements can apply to teenagers.

Information processed and why

PixelPict does not request access to your contacts, microphone, camera, or precise GPS location for its current gameplay. It does not offer a player-facing photo-upload feature. Listening to in-game music does not involve recording audio. Advertising SDKs can still infer an approximate location from an IP address without a GPS permission.

There is no separate general-purpose product-analytics SDK in the current app. This does not mean there is no analytics: AdMob processes advertising analytics, RevenueCat provides purchase reporting, and hosting providers process operational information.

Providers and disclosures

Information is disclosed as needed to provide the features above:

• Convex: cloud database, artwork delivery, and hosting for Better Auth authentication. See Convex's privacy policy.
• Apple, Google, and Facebook (Meta): the sign-in provider you choose. Their own policies govern their services: Apple, Google, and Meta.
• Google AdMob and UMP: advertising and consent management. See Google's privacy policy and how Google uses information from apps that use its services. Ad partners applicable to a consent message are identified in that message where provided.
• RevenueCat: purchase validation, entitlement management, and purchase reporting. See RevenueCat's privacy policy.
• Apple App Store and Google Play: payment processing, purchase records, and refunds under their own store terms and policies.
• Website and email providers: hosting these pages and delivering support correspondence. If hosted on GitHub Pages, GitHub processes request information under GitHub's privacy statement.

Some providers act on the developer's behalf; others, including sign-in providers, app stores, and advertising partners for some activities, act independently under their own obligations. Linking a provider's policy does not replace this policy or the developer's responsibility for PixelPict's practices.

Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal process, protect users and the service, or complete a business transfer with legally required safeguards and notice. It is not made publicly available as part of normal gameplay.

Advertising, tracking, and your choices

The free game uses interstitial ads and optional rewarded ads for hints. Plus removes these ad placements and provides unlimited hints. Ad-free does not necessarily mean no SDK processing: purchasing Plus does not by itself guarantee that every advertising SDK network request stops.

PixelPict uses Google UMP for applicable advertising consent messages, including in the EEA, UK, and Switzerland. On iOS, the system App Tracking Transparency permission is separate from UMP consent. You do not have to agree to advertising tracking to play the game.

You can change tracking permissions in your device settings and reset or delete an advertising ID where the operating system allows it. Withdrawing consent does not make earlier processing unlawful. Refusing personalized ads does not necessarily eliminate all advertising or all data processing; limited or contextual ads can still involve data processing where lawful, and ads may be unavailable in some circumstances.

The advertising consent form explains the available purposes, partners, and choices. Where an advertising privacy-options control is available in the app, use it to revisit those choices. You can also contact doanhtu07@gmail.com to request an opt-out of sale, sharing, or targeted advertising or for help with other privacy choices. Device tracking permissions and advertising consent are separate controls; changing one does not necessarily change the other.

PixelPict does not sell account profiles for money. However, disclosure of identifiers or activity to advertising partners can qualify as a "sale," "sharing," or targeted advertising under some privacy laws. Where applicable, you may opt out of those activities without buying Plus.

Retention and deletion

• Local progress and preferences: remain on your device until cleared, replaced, or removed. The in-app Delete local data action clears the game's local progress and artwork caches; it is not a promise to erase all third-party SDK records or operating-system backups.
• Account and synced progress: retained while your account exists, unless removed earlier or retained as described below. Completed account deletion removes the active account/profile and associated authentication records, synced progress, and sync counter, and requests deletion of the associated RevenueCat customer record.
• Deletion marker — removed after a short grace period: PixelPict temporarily retains internal account identifiers, the deletion-request time, and progress-purge completion time. This record makes repeat deletion requests safe and blocks stale devices or in-flight requests from restoring deleted progress. It becomes eligible for automatic cleanup 24 hours after the progress purge, provided the account has been deleted. Cleanup runs hourly in bounded batches, so removal is not necessarily at exactly 24 hours and may take longer during a backlog or interruption. If account deletion has not completed, the marker remains so deletion can be resumed safely. It does not contain your name, email, coloring progress, or purchase history. It remains account-related information while retained and is not used for advertising or marketing.
• Purchases: deleting PixelPict data does not delete Apple or Google's purchase records, cancel a store purchase, or issue a refund. Restoring a valid purchase can recreate a RevenueCat record.
• Guest purchases and SDK data: deleting local guest data does not automatically delete a never-linked anonymous RevenueCat customer or advertising-provider records. Contact support for help identifying and handling those records where possible. Some independent provider records are controlled by that provider.
• Support messages: kept as needed to answer the request, handle follow-up, and meet applicable legal obligations. Do not send passwords or complete payment details.
• Logs, backups, and required records: providers may retain logs and backup copies according to their configured retention and applicable obligations. Limited records may also be retained where necessary for security, fraud prevention, legal obligations, or legal claims. They are not used to restore a deleted account for ordinary gameplay.

See Delete your account or data for both the in-app steps and an external request method. For information without a fixed retention period, retention depends on whether it is still needed for the stated purpose, to resolve an outstanding issue, or to satisfy a legal obligation. Contact the developer for information about a particular record.

Your privacy rights

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a portable copy of your information; restrict or object to processing; withdraw consent; opt out of sale, sharing, or targeted advertising; and appeal a denied request. You may also have the right to complain to a data-protection authority. PixelPict does not make automated decisions about you that produce legal or similarly significant effects.

Email doanhtu07@gmail.com with the request and enough information to locate your PixelPict account. Identity verification may be necessary before disclosing or deleting information. Do not send a password, government ID, or full payment-card number unless a lawful and proportionate verification method has been specifically agreed. Authorized agents may submit requests where permitted, with appropriate proof of authority.

Requests will be handled within the periods required by applicable law, including permitted extensions and notice. If a request is denied, the response will explain the reason and any applicable appeal process. You may submit an appeal to the same email with the subject PixelPict privacy appeal. You will not be unlawfully discriminated against for exercising privacy rights.

For guest information, the developer may not be able to link a provider's anonymous identifier to you from your email alone. You will not be asked to create an account merely to submit a request. Device-local data generally must be cleared on the device because the developer cannot remotely access it.

EEA, UK, and Switzerland

Where these laws apply, providing your requested account, sync, and purchase features relies on performing a contract; protecting accounts, preventing deleted progress from being restored, troubleshooting, and answering inquiries relies on legitimate interests where appropriate; legally required recordkeeping relies on legal obligations; and processing that requires consent relies on consent. Advertising consent is not bundled with acceptance of the Terms. Account and purchase information is needed to provide those optional features; you can instead play as a guest without using account sync or buying Plus.

Right to object: you may object to processing based on legitimate interests by emailing the developer. You may also withdraw consent at any time. Any parental authorization required by local law must be obtained before a minor uses a feature or processing activity that requires it.

You can complain to your local supervisory authority, such as an EEA data-protection authority or the UK Information Commissioner's Office. Contact the developer to ask about the safeguards applicable to a particular transfer or processing activity.

United States, including Texas and California

U.S. state privacy laws have different scope, thresholds, exemptions, and definitions. Being based in Texas does not mean the Texas Data Privacy and Security Act or California's CCPA applies to every activity. Where applicable, the categories in the table above describe the information, sources, purposes, and recipients; retention is described above. Applicable sale/sharing and targeted-advertising rights are addressed in the advertising section. This notice does not claim that every state-law right applies to every user or that small-business status removes all privacy obligations.

International processing and security

The developer is based in the United States. Providers may process information in the United States and other countries with different privacy laws. Applicable provider data-processing terms describe their transfer safeguards. For example, RevenueCat's Data Processing Addendum incorporates EU Standard Contractual Clauses and UK and Swiss provisions for covered transfers. Contact the developer for details or a copy of the safeguards relevant to your information. PixelPict does not claim its own certification under a data-privacy framework.

PixelPict uses authenticated access for account data, encrypted transport for its service requests, and platform secure storage for authentication credentials. No system is completely secure. Email support is not an appropriate place to send secrets or sensitive documents.

Children and teenagers

PixelPict is intended for users 13 and older and is not directed at children under 13. If you believe a child under 13 has provided personal information, contact the developer so it can be investigated and deleted where required by law.

In some places, a person aged 13–17 needs parental authorization for certain processing or purchases. A parent or guardian should help the teenager review the available choices and obtain any authorization required by local law. A store content rating does not change those legal requirements.

Website storage and policy changes

These support and legal pages do not intentionally add advertising cookies or analytics scripts. Their host can still process ordinary request logs. The mobile app uses device storage and SDK identifiers as described above.

This policy may be updated when the app or its practices change. The date above identifies the latest version. Material changes will receive any notice or consent required by law.

Support · Terms of Use · Delete account