Effective date: March 25, 2026
Last updated: March 25, 2026
This Privacy Policy describes how Pixel Pitch (the “Service”) collects, uses, stores, and shares information when you use our website and, where available, our mobile application.
The operator of the Service is:
- [Legal entity name] (“we,” “us,” or “our”)
Contact for privacy inquiries:
- Email: [privacy contact email]
If you use the Service in the European Economic Area (EEA), United Kingdom, or Switzerland, we are the data controller for personal data described below, unless we state otherwise (for example, where we process data strictly on behalf of a host running a private instance).
1. Summary
- Casual play does not require a user account. You typically join with a game code and a display name you choose.
- We process data needed to run multiplayer games (game state, scores, real-time updates) and to protect the Service (rate limiting, security logging).
- We store certain information in cookies (including session cookies for games and optional cookies for daily leaderboard features).
- We do not sell your personal information. We do not use third-party advertising or behavioral analytics tools in the application as currently shipped (see Section 6).
This policy is meant to align with common expectations and regulatory frameworks (including GDPR-style transparency and CCPA-style disclosures where applicable). It is not legal advice; consult qualified counsel for your jurisdiction and deployment.
2. Information we collect
2.1 Information you provide directly
| Category | Examples | Purpose |
|---|---|---|
| Display name | A nickname you enter when joining a game | Identify you to other players in the same session; show on scoreboards and results |
| Game actions | Guesses, votes, mini-game inputs, messages implied by gameplay | Operate rounds, scoring, and mini-games |
| Optional leaderboard name | Name submitted for daily or similar leaderboards | Show your rank and points on leaderboards |
Display names may be visible to other participants in the same game and, where applicable, on public or semi-public leaderboards.
2.2 Information collected automatically
| Category | Examples | Purpose |
|---|---|---|
| Technical connection data | IP address, user agent, request metadata | Rate limiting, abuse prevention, security logging, troubleshooting, and service reliability |
| Identifiers we assign | Server-generated player IDs tied to your session | Associate your actions with your seat in a game |
| Real-time connection metadata | Connection identifiers used for live updates | Maintain live connections for in-game updates |
IP addresses may be processed in memory for rate limiting and may appear in server logs for a limited time depending on hosting configuration.
2.3 Cookies and similar technologies
We use cookies and, in some flows, browser storage (such as localStorage) where needed for the Service to function.
| Name / pattern | Type | Purpose |
|---|---|---|
game_session_{GAME_CODE} | HTTP-only cookie | Binds your browser to a game session (player id, display name, creator flag, expiry). Used to authorize session and live-update requests. |
pgg_daily_leader | Cookie (readable by scripts on our origin where implemented) | Stable random id and display name for daily leaderboard identity across sessions (where that feature is enabled). |
localStorage keys such as pgg_daily_submitted:... | Browser storage | Remember that you already submitted a daily result for a given identity, where implemented, to improve UX. |
Cookies may include Secure and SameSite attributes in production. Exact names and behavior can evolve with product updates; we will update this policy for material changes.
2.4 Product information in gameplay
The Service may display product names, descriptions, prices, images, and links for rounds and mini-games. That content may be stored on our servers to power gameplay and images. This policy focuses on user data; rights in third-party product content belong to their respective owners.
3. How we use information
We use the information above to:
- Provide the Service — create and join games, synchronize state across devices, compute scores, run mini-games, and show results.
- Real-time features — deliver updates to connected clients during play.
- Leaderboards and daily challenges — record scores and rankings where those features are enabled.
- Security and integrity — rate limiting, detecting invalid or abusive requests, and protecting hosts and players.
- Improve reliability — debugging, error monitoring, and operational metrics on our infrastructure (not sold to advertisers).
- Comply with law — respond to lawful requests where required.
We do not use your display name or gameplay for automated profiling for advertising in the shipped product. We do not sell personal information as defined under the California Consumer Privacy Act (CCPA/CPRA) “sale” framework.
4. Legal bases (EEA/UK/Switzerland)
Where GDPR applies, we rely on:
- Contract — processing necessary to provide the Service you request (multiplayer game, leaderboards you opt into).
- Legitimate interests — securing the Service, preventing abuse, and improving stability (balanced against your rights).
- Legal obligation — where we must retain or disclose information by law.
Where we ask for consent (for example, for non-essential cookies in some regions), we will obtain it separately where required.
5. Storage, retention, and security
- Data storage: Game data, player records, scores, and related information are stored on our systems as required for gameplay and leaderboards.
- Retention: We retain data as long as needed to operate the Service and for legitimate business and legal purposes (for example, backups, dispute resolution). Specific retention periods depend on deployment; game data may be deleted or rotated according to operator policy.
- Security: We use industry-standard measures appropriate to the risk (for example, HTTP-only session cookies for sensitive sessions, TLS in production, rate limiting, input validation). No method of transmission or storage is 100% secure.
6. Sharing and subprocessors
We do not sell personal information. We may share data with:
| Recipient | Why |
|---|---|
| Hosting / infrastructure providers | Servers, storage, networking, backups (e.g., cloud or other hosting providers). |
| Personnel | Employees or contractors under confidentiality and least-privilege access. |
| Professional advisers | Lawyers or accountants where required. |
| Authorities | When required by law or to protect rights, safety, and security. |
The Service as currently implemented does not load third-party advertising or analytics scripts for routine gameplay. If we add analytics or embedded content that shares personal data, we will update this policy and, where required, obtain consent.
Fonts: We may use web fonts optimized for performance. Fonts may be served from our deployment rather than from a third party at runtime; your experience may vary by version.
7. International transfers
If you access the Service from outside the country where our servers are located, your information may be transferred across borders. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EEA/UK/Switzerland.
8. Your rights and choices
Depending on your location, you may have the right to:
- Access a copy of your personal data.
- Correct inaccurate data.
- Delete certain data, subject to legal exceptions.
- Object or restrict certain processing.
- Port data you provided where technically feasible.
- Withdraw consent where processing is consent-based.
- Lodge a complaint with a supervisory authority.
How to exercise rights: Email [privacy contact email]. We may need to verify your request. Because gameplay data is often pseudonymous (tied to a session id and display name), we may not be able to identify all data without additional information you provide.
California residents (CCPA/CPRA): You have the right to know, delete, and correct personal information, and to opt out of sale or sharing for cross-context behavioral advertising. We do not sell personal information as described in Section 6. You may designate an authorized agent where permitted by law.
Do Not Track: There is no consistent industry standard; we do not respond to DNT signals in a uniform way.
9. Children
The Service is a general-audience party game. It is not directed at children under 13 (or the age required by your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe we have collected such information, contact us and we will delete it promptly.
10. Third-party sites and product links
Gameplay may reference or link to retailer or affiliate URLs for products. Those sites have their own privacy policies. We are not responsible for their practices.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version with an updated Effective date and, where changes are material, provide additional notice as appropriate (for example, a notice on the Service).
12. Contact
Privacy questions: [privacy contact email]
Operator: [Legal entity name]
Address (optional): [Physical or registered address]