Privacy Policy

1. Who is responsible for your information

PixelPlot is an independently operated project. The PixelPlot operator is responsible for the personal information processed to run this board, including deciding why and how it is used. Where data protection law uses the term, the operator is the controller of that information. For privacy questions or requests, email [email protected].

This policy covers PixelPlot. Clerk, Polar, and other providers also process information to provide their services, and their own policies describe processing for which they are independently responsible.

2. Information we handle

• Account information: Clerk manages your sign-in details, email address, profile name and image, and any connected sign-in provider. PixelPlot uses your Clerk account identifier to authorize requests and associate plots, reservations, generation limits, and checkouts with your account. Account information available to PixelPlot depends on the sign-in method and information you supply.
• Board content: the brand or display name you submit, uploaded logos, website links, selected or generated buildings, plot coordinates, package, claim dates, and expansion content.
• Checkout and claim records: reservations, account and product identifiers, quoted amounts, currency, checkout and order references, fulfillment status, and transaction timestamps. Polar collects checkout contact, billing, tax, and payment details directly in its hosted checkout; PixelPlot does not collect full card numbers or card security codes. Live purchases use real payments; separately identified development or sandbox environments use test transactions.
• Generation information: your architectural description, extracted logo colors, generated images, and usage counters if you choose AI building generation.
• Technical and usage information: requests, IP addresses, browser/device information, timestamps, error and security logs handled by our hosting and authentication providers; aggregate board visit and plot-click counts. Administrative sign-in protection uses hashed identifiers to limit abuse.
• Support messages: your email address, message contents, and any account, plot, or order information you choose to send us. Do not send passwords, full card details, or unnecessary sensitive information.

3. Why we use information

We use information to create and authenticate accounts; reserve and manage plots; display your chosen content; verify checkout and fulfill claims; generate requested artwork; maintain counters and rankings; answer support requests; prevent abuse; diagnose failures; enforce our Terms of Service; and comply with legal obligations.

Where a legal basis is required, we rely on performance of a contract for the account and services you request; legitimate interests in operating, securing, and improving the board and responding to support; legal obligations for required records and disclosures; and consent where the law requires it, such as for non-essential tracking. You may withdraw consent without affecting processing that was lawful before withdrawal.

PixelPlot does not sell personal information or share it for cross-context behavioral advertising. We do not use your uploaded logos or prompts to train a PixelPlot AI model. A generation provider’s handling of inputs is subject to its own terms; avoid sending confidential information.

4. What other visitors can see

The board is public. Published brand names, logos, buildings, destination links, plot locations, claim details, and plot-click counts can be seen by other visitors. The leaderboard displays brand names, claim counts, and aggregate test-spend totals. Expansion branding is public while its cycle is displayed.

Account identifiers, email addresses, private checkout references, and the identity of reservation holders are not included in the public board response. Do not use an email address or other private information as your public brand name unless you intend to publish it.

Visitors can copy, screenshot, or share published content. We cannot recall copies others have made. Following a brand’s website link takes you to a separate site whose privacy practices we do not control.

5. Service providers and other disclosures

We share information as needed with the following services:

• Clerk: authentication, account profiles, and sessions, acting as a processor for application account data on our behalf. This PixelPlot policy governs that account data. Clerk’s Privacy Policy explains its independently controlled information, and its cookie documentation describes authentication cookies. A connected identity provider, such as Google, also handles your sign-in under its own policy.
• Polar: hosted checkout, transaction processing, and checkout-status events. We send your account identifier, product, quoted amount, and a checkout reference to connect a payment result to a claim. See Polar’s Privacy Policy and Buyer Terms. Polar may process data for its own payment, tax, fraud-prevention, and legal obligations.
• Supabase: database and object storage for plot, reservation, checkout, security, and asset records. Uploaded logos and approved building images use public asset URLs. See Supabase’s Privacy Policy.
• Vercel: application hosting and operational request/error processing when PixelPlot is deployed on Vercel. See Vercel’s Privacy Policy.
• Runware: optional AI generation receives your building description and extracted logo colors; generated images are also sent for background removal. Your uploaded logo is processed on our server to extract colors, rather than being sent as the generation reference image.
• Google Fonts: the website requests fonts from Google, which receives your IP address and request information. See Google’s Privacy Policy.

We may disclose information when reasonably necessary to meet a legal obligation, respond to a valid legal request, investigate abuse, or protect people’s rights and security. If operation of PixelPlot is transferred, relevant records may transfer with it, subject to applicable law and notice where required.

6. Cookies and browser storage

Clerk uses cookies and related browser storage to authenticate you and maintain secure sessions. The admin area also uses a session cookie. Blocking essential cookies can prevent sign-in and account features from working. Polar’s checkout has its own cookie and storage practices.

PixelPlot stores a session-only visit flag in your browser’s session storage so the board visit counter is not incremented on every refresh of the same tab. It is not an advertising identifier. Plot clicks increment an aggregate count when a visitor opens a plot’s details.

You can clear cookies and website storage through your browser settings, although this may sign you out or reset the visit flag. We do not currently integrate advertising trackers into the board. If we introduce non-essential cookies or similar tracking, we will update this policy and request consent where required before using them.

7. Retention and deletion

We keep account-linked plot and asset records while they are needed to provide the board and manage claims. We retain transaction, security, support, and audit records for as long as reasonably necessary to resolve issues, prevent fraud, and meet applicable legal requirements. Retention depends on the record and purpose rather than a single fixed period; providers have their own retention rules.

To request account closure, content removal, or deletion, email support. Deleting a Clerk account does not automatically delete the associated board records or public asset files. We will assess which records can be deleted or anonymized and explain any lawful reason to retain others. Removed data may remain in backups until those backups expire; third-party copies and mandatory provider records may remain outside our control.

8. Security and international processing

We use access controls, server-side authorization, encrypted network connections, and provider security features to protect information. No service or transmission method is completely secure. Please protect your sign-in methods and notify support if you suspect misuse.

Our providers may process or store information outside your country. Protections and legal rights can differ between countries. Where applicable law requires safeguards for an international transfer, those safeguards must be in place, such as an adequacy decision or appropriate contractual protections. Contact us for information about the providers and safeguards relevant to your data.

9. Your choices and privacy rights

Depending on where you live and the applicable law, you may request access to, correction of, deletion of, or a portable copy of your personal information; object to certain processing; restrict processing; or withdraw consent. You may also complain to the relevant data protection authority. These rights are subject to lawful exceptions.

Use your account settings to manage available profile information and My plots to edit supported board content. For other requests, contact [email protected] from your account email if possible. We may ask for proportionate verification before disclosing or changing records. We will respond within the period required by applicable law and will not penalize you for exercising your rights.

For information independently controlled by Clerk or Polar, you can also contact that provider using its privacy policy. We will help route a request where appropriate.

10. Children

PixelPlot account and claim features are intended for adults aged 18 or older. We do not knowingly collect children’s personal information for those features. If you believe a child has supplied personal information to us, contact support so we can investigate and take appropriate action.

11. Changes and contact

We will update this policy when our practices change and revise the date above. We will provide additional notice of material changes and obtain consent where applicable law requires it.

For privacy, account, billing, or content questions, contact [email protected].