Privacy Notice

1. Who we are

This Privacy Notice applies to Pixel Realms (the "Service"), operated by Shahar Shaer ("we", "us"). Shahar Shaer is the data controller for personal data collected through the Service.

2. Personal data we collect

• Account data — email address, username, hashed password, and sign-in identifiers (e.g. Google ID if you use Google sign-in).
• Player profile — chosen character class, level, XP, in-game currency balances, inventory, and progression state.
• Support messages — anything you send us when you ask for help.
• Usage and telemetry — pages viewed, features used, error reports, approximate timing of sessions.
• Device and connection data — device type, browser, operating system, and IP address.

Payment and billing data is collected directly by our payment processor Paddle and is not stored by us. See section 5.

3. Why we use it (purposes and legal basis)

• Provide the Service — create your account, save progress, sync world state (contract performance).
• Security and fraud prevention — detect abuse, cheating, and account compromise (legitimate interests).
• Customer support — respond to your questions (legitimate interests / contract performance).
• Product improvement — understand which features are used and fix bugs (legitimate interests).
• Legal compliance — meet tax, accounting, and regulatory obligations (legal obligation).

4. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and to remember audio and gameplay preferences. We do not currently use advertising or cross-site tracking cookies. Where analytics are used they are limited to aggregate product usage.

5. Who we share data with

• Service providers / subprocessors — hosting, database, and error reporting infrastructure that runs the game.
• Paddle.com — our Merchant of Record — for sale of the product, subscription management, payments, tax compliance, and invoicing. Paddle processes payment data under its own privacy notice.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose data by law.

6. International transfers

Personal data may be processed outside your country of residence, including in regions outside the UK/EEA. Where required we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

7. Retention

We keep account and player-profile data for as long as your account is active, and for a limited period afterwards to meet legal, accounting, and security obligations. When data is no longer needed we delete or anonymise it.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege database rules — to protect your personal data. No system is perfectly secure, but we work to keep risks low.

9. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, or to withdraw consent where processing is based on consent. If you are in the UK/EEA you also have the right to complain to your local supervisory authority. We will respond to verified requests within one month.

To exercise any of these rights, contact us through the in-app support channel.

10. Changes to this notice

We may update this Privacy Notice from time to time. Changes take effect when posted on this page and we will update the "Last updated" date above.

11. Contact

For privacy questions contact Shahar Shaer via the in-app support channel. For billing and payments, contact Paddle at paddle.net.