Privacy, plainly

For questions about how Pixelroots uses personal data, contact hello@pixelroots.org.

What we use

We process your selected pixels, submitted artwork or text, link, payment reference and status to fulfil your order. Your published artwork, text and website link are public. Please do not put private information in them. We process messages and contact details you send to support to respond and handle requests.

A secure first-party cookie identifies your browser so you can upload artwork and access your order status. Browser session storage preserves your unfinished checkout draft when you return from Stripe. These are used to provide the requested service. We do not use advertising or behavioural analytics cookies.

For security, we process limited request information and a keyed hash of your IP address for rate limiting. Cloudflare Turnstile checks for automated abuse. The security providers may process connection and device information. We do not sell personal data.

Our service providers

Cloudflare hosts the application, database and uploaded files and provides network security. Stripe processes payments and the information you enter on its checkout page. Full card details are handled by Stripe, not stored by Pixelroots. Providers may process data internationally using their applicable transfer safeguards. Their notices are available at Cloudflare privacy and Stripe privacy.

Why and how long

We use order data to perform our contract with you, security data for our legitimate interest in preventing abuse, and records needed to meet legal obligations. Uploaded drafts that are not attached to an order are removed after 24 hours. Purchased artwork remains while displayed. Transaction and support records are retained as needed to provide the service, resolve disputes and meet applicable accounting requirements; access is restricted.