Privacy Policy
Who is responsible for your data?
Gallion Labs, who can be reached at william@gallionlabs.com.
The data we process
- Without an account, your drawings stay on your phone: nothing is sent.
- Your account: you can create it with Google, with Apple, or with your email address and a password. Google sends us your email address, your name and your account photo; Apple, your email address (or a relay address, if you choose to hide yours). Your password is never stored in plain text, only its encrypted fingerprint. The data below is saved to your account.
- Your drawings: the coloring grids and your progress, your Studio creations (drawing layers), their names, their tags and the time spent. An image you import is converted on your phone: only the resulting grid of cells is synced. Studio reference images are saved with the creation that uses them, as are the folders you sort your drawings into (their name, and whether they are hidden).
- The private folder is the exception: drawings you put in it stay on your phone and are never sent to us, even with an account. If they had been backed up before, they are removed from our server at the next sync, and disappear from our backups after 30 days. Only the total number of cells you have colored in it is sent, nothing else (no drawing, no name), for our usage statistics.
- Your profile: your nickname, and the drawings chosen as profile picture and banner.
- Friends, if you join them: your nickname, picture and banner (a reduced copy), your number of friends and the drawings you choose to show on your profile (a copy, never those in the private folder) are visible to other signed-in players. We keep your friend requests, your friend list, the accounts you block and your messages, including the drawings you send (a copy: only drawings from the app, never those in the private folder), to deliver them to their recipients. If you report a player, your report is kept, with the reported message or drawing, so that we can review it: we may then read the messages exchanged around the reported one, between you and that player only. If your account is suspended, we keep the length and reason of the suspension until the account is deleted. The Pixelarp team may write to you from the official “Pixelarp” account; we keep these messages like the others.
- Friend notifications, if you keep them on: your phone gives us a device identifier (Firebase Cloud Messaging). When a friend writes to you or a player sends you a friend request, we pass only their nickname to Google (and Apple on iPhone), to show “You got a message from …” or “… sent you a friend request” on your phone: never the text or the drawings. You can turn them off in the settings.
- Your pixels, your achievements and the skins you have unlocked.
- Auctions: a creation you put up for auction is visible to all signed-in players, with your nickname; so are your bids on other players’ sales (your nickname and the amount). A sold creation is copied to the buyer, with your nickname as its original author. If you report a listing, your report is kept so that we can review it.
- Your settings (appearance, skin, daily challenge, reminder): on your phone only.
- Pixelarp Gold: the purchase is made through the App Store or Google Play, which process the payment. We receive neither your payment method nor your address. Purchases go through RevenueCat, which checks with the store what you have bought and links it to the identifier of your Pixelarp account (without an account, to a random device identifier): RevenueCat receives this identifier and the history of your Pixelarp Gold purchases. The app notes the result on your phone, and our server keeps, for your account, whether you have Pixelarp Gold, its plan and its end date. If we give you Pixelarp Gold, it is noted on your account.
- Crash reports: when the app crashes, it sends the technical details of the error, the phone model, its system version and a random installation identifier. They contain neither your drawings nor your account. You can turn them off in the settings.
- To receive the service settings (skin prices, promotions, announcements) and new library images, the app contacts our servers with a random installation identifier and, as with any connection, your IP address.
- An anonymous counter: at most once a day, the app tells our server that it was opened, with or without an account, and, on the very first launch, that it has just been installed. This signal contains no identifier (no account, device or drawing): the server only adds up the number of launches per day, and your IP address is only used to limit requests, without being stored.
What we don’t do
- No advertising, no tracking, no audience measurement other than the anonymous counter described above.
- Crash reports are only used to fix errors.
- No selling or sharing of your data for commercial purposes.
- No access to your photos, other than those you choose to import.
Why
To save your drawings, get them back on your other devices and run the auctions, friends and messages. This is necessary to provide the service you use (Article 6(1)(b) GDPR).
To keep the game fair, our server checks your pixel earnings against your synced drawings before you can bid: this is our legitimate interest (Article 6(1)(f) GDPR).
Crash reports are used to fix errors in the app: this is our legitimate interest (Article 6(1)(f) GDPR), and you can object by turning them off. They are kept for 90 days.
Who has access
Your data is stored on our server, at Hetzner, in Germany. Its backups are at Cloudflare, in Western Europe. Hetzner and Cloudflare process it on our behalf only.
Other players only see what is public: in the auctions, your creations up for sale, your nickname and your bids; if you have joined friends, your nickname, picture, banner, number of friends and the drawings you show on your profile. Your messages are only delivered to the friend you write to; we only read them if they are reported to us.
Google or Apple sign-in, crash reports, remote settings and message notifications (Google, Firebase; Apple on iPhone), sending sign-in emails (Resend), purchase verification (RevenueCat) and the protection of access to the server (Cloudflare) may involve processing outside the European Union, governed by the European Commission’s standard contractual clauses.
While we move from Firebase to our own server, a copy of account data also remains at Google (Firebase), in the European Union, as an archive: it will be deleted once the move is complete.
How long
As long as your account exists.
- “Delete my account” (Settings) immediately erases your data from our server and from the phone. Your nickname is removed from the auctions; a creation already sold stays with its buyer.
- Your messages are kept as long as your account and your friend’s exist; removing a friend hides the conversation. Deleting your account erases your card, your friend list and your conversations, on both sides.
- Server backups are kept for 30 days: deleted data disappears from them at most 30 days later.
- A drawing moved to the trash is permanently deleted after 30 days, or immediately if you empty the trash.
- “Sign out” erases the data on the phone: it stays on your account.
- If you uninstall the app without deleting your account, your data stays on your account: sign in again to get it back, or write to us to have it deleted.
Your rights
You can request access to your data, its rectification, erasure or portability, and object to its processing, by writing to william@gallionlabs.com.
You can also lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.
Notifications
The daily challenge reminder and the auction-end reminders are scheduled on your phone: no data is sent for them.
Friend notifications (messages, friend requests) are sent by our server (see “The data we process”).
Under 15
If you are under 15, ask a parent for permission before creating an account.