Privacy Policy
Last updated October 25, 2026
WorldPixel collects very little. We don't ask for your name, email, phone number or card details, and we don't run ads, analytics or tracking scripts.
What we store
| What | Why |
|---|---|
| Your username and country | To run your account. Both are public. |
| Your password, as a one-way hash (scrypt) | To check it when you log in. We never store the password itself. |
| The IP address you signed up from | To stop mass account creation. Login attempts are also counted by IP for 15 minutes to slow down password guessing. |
| Every pixel you color, with the time | To run and rebuild the map. Anyone can see who last colored a pixel and when. |
| Your purchases: pack, price, the Bitcoin address we made for the order, amounts and transaction ids | To credit your pixels and keep payment records. |
Cookies
We set one cookie, wp, which keeps you logged in. It lasts 30 days and is removed when you log out. We don't use any other cookies. If you turn sound off, that choice is saved in your browser's local storage and never sent to us.
Who else sees data
- Other players see your username, country, pixels and leaderboard position.
- Our hosting and database providers (Render and MongoDB Atlas) store the data above for us.
- Bitcoin services. Our server asks mempool.space and blockstream.info whether an order's address has been paid, and asks mempool.space or Coinbase for the Bitcoin price. Only the address is sent, never your username. Your browser doesn't contact them, and the payment QR code is made in your browser.
- The Bitcoin network is public. Anyone can see a payment to an address. We don't publish which account an address belongs to.
We don't sell or rent your data, and we only share it beyond this if the law requires us to.
How long we keep it
We keep your account until you ask us to delete it. Logins expire after 30 days. Payment records are kept as long as we need them for accounting.
Deleting your account
Ask us through the contact link below, from your account's username. We delete your account and login data. Pixels you colored stay on the map, since they are part of other players' game, but they no longer show your name. You can also ask what data we hold about you, or for it to be corrected.
Children
WorldPixel is not for children under 13. If we learn that a child under 13 has an account, we delete it.
Security
Passwords are hashed, the login cookie can't be read by scripts on the page, and repeated wrong passwords lock an account for 15 minutes. No system is perfectly secure, so use a password you don't use anywhere else.
Changes
We may update this policy. The date at the top shows the latest version.
Contact
Open an issue at github.com/SergeiZhdanov123/worldpixel/issues. Issues there are public, so don't post your password or other private details.