Privacy Policy

1. Overview

Pixel Asset Lab ("we", "the service") is a browser-based pixel art tool. This policy explains what data we handle, why, and the choices you have. Optional analytics and advertising require a separate choice.

2. Your artwork (local-first)

Projects you create are stored in your browser (IndexedDB) by default. Image imports and pixel editing happen in your browser. When our cloud service is available, the editor also attempts to sync saved projects automatically, including for guests; this is part of project storage, independent of optional analytics and advertising. Clearing your browser data deletes local projects permanently.

3. Cloud project storage

When cloud sync is available, saved project data, names, palettes, frames and preview images are sent to our Cloudflare-hosted service. Local saves continue to work if sync is unavailable. Anonymous visitors are scoped by an anonymous session cookie; signed-in users are scoped by their account. You can delete any synced project at any time from the Workspace page, which removes the saved artwork and leaves a temporary deletion record to prevent an offline device from restoring it.

Sharing & feedback

Sharing is optional. Creating a share link publishes the project name and a flattened PNG or GIF preview. Anyone with the link can view and save that preview; editable project data and layers remain private. Edits are published only when you update the shared preview. Stopping sharing or deleting the project disables the link. Copies already saved by other people or sharing services cannot be recalled.

Feedback you choose to send is stored privately for our team, independently of analytics consent. It includes your message, intended use, optional goal and reply email, page path, a reference to the related project or shared artwork when available, and your account or guest session identifier. Query strings and editable artwork are not attached to feedback. We use the email only to follow up about your response. A daily salted network identifier helps prevent repeated submissions; raw IP addresses are not stored with feedback. Feedback is removed after 365 days by daily cleanup. Contact us to request earlier removal.

4. Accounts (optional)

Sign-in is optional and handled by Clerk (a third-party authentication provider). When you sign in, Clerk processes your email address and authentication identifiers on our behalf. We never post anything on your behalf and we do not receive your password.

5. AI generation

When you use the Pixel Art Generator, your text prompt and generation parameters are sent to our servers and processed by Cloudflare Workers AI to produce an image. Cloudflare processes these requests under its service terms and privacy policy. Generated images may be temporarily cached as part of serving your request.

To enforce the daily AI allowance, we store a daily pseudonymous identifier and image count. This identifier is derived from your account when signed in, or your network IP for guest use; raw IP addresses are not stored in these usage records. Guest users on the same network share an allowance. Usage records are removed after seven days by our daily cleanup.

6. Cookies & analytics

We use the following cookies and browser storage:

• Essential: the signed guest session cookie (__Host-pal_session, or pal_session on older/local sessions), Clerk authentication cookies, IndexedDB project storage, and local preferences for theme, onboarding, learning preferences and course progress. Learning goals, experience, audience preferences, course checklists and progress stay in this browser and are not synced to your account. Recommendations use these local choices and progress. Your cookie choices are stored locally. Blocking browser storage can prevent saves and sign-in.
• Optional analytics: only after you enable Usage analytics, Google Analytics 4 processes page paths and tool interactions, and our own database records usage events, approximate time on pages and a pseudonymous session identifier. GA may set cookies such as _ga. We do not send your artwork, prompt text or email address as analytics event parameters. Both analytics channels stay off before a choice and after rejection. Disabling analytics stops future collection and clears accessible first-party GA cookies.

7. Advertising

We use Google AdSense to support free access, with at most one labelled ad unit after a guide, reference document, workshop or lesson. Ads load only if the unit is configured and you enable Advertising in Cookie settings. We request non-personalized ads, which can still use cookies for reporting, fraud prevention and frequency control. Google may process your IP address, browser information and ad interactions. Rejecting or withdrawing advertising permission prevents new ad requests and removes the displayed unit. We do not send your artwork to advertisers.

Change either optional purpose via "Cookie settings" in the footer. See how Google uses data from partner sites, Google advertising cookies, Google My Ad Center, Cloudflare's privacy policy and Clerk's privacy policy.

8. Data retention

Cloud-synced projects are kept until you delete them or request their removal. Our own analytics events are pruned after 90 days, guest session records after 200 days, and project deletion records after 30 days by scheduled cleanup. Local projects, course progress and preferences remain until you clear browser data or remove them. Google's and Clerk's retention practices apply to data they process; contact us about access or deletion requests.

9. Your rights

Depending on your jurisdiction (e.g. GDPR), you may have rights to access, export, correct or delete your personal data. Since artwork is stored locally or under an account or guest session, you can exercise most rights directly in the app. For anything else, contact support@pikanim.com.

10. Children

The service is not directed at children under 13, and we do not knowingly collect personal information from them.

11. Changes

We may update this policy as the service evolves. Material changes will be announced on this page with a new "Last updated" date.