Privacy Policy

At Pixxel Studio, we take your privacy seriously. This Privacy Policy details how we collect, process, use, and protect your personal information when you access and use our website and web application services.

1. Information We Collect

We only collect information that is strictly necessary to provide the web conversion service, authenticate your session, and manage plan allocations.

A. Account Information

• Email Address: Collected during sign-up to authenticate your account and communicate essential billing notifications.
• Credentials: Your password is hashed immediately on our server using a sync PBKDF2 function (with SHA-512 and a secure unique salt) before storage. We never store passwords in plain text.

B. Session Cookies and Local Storage

• session_token Cookie: Issued upon successful login with an expiration of 30 days. It uses the HTTP-only flag to protect it from cross-site scripting (XSS) access.
• pendingCheckout Local Storage: A temporary item stored in your browser's local storage to preserve your selected tier choice during checkout login redirections.

C. Project Storage and Usage Data

To enforce the limits of our Free, Pro, and Agency tiers, we track the following usage metrics in our database for each user account: number of pages crawled, total code exports initiated, and cumulative disk storage size (in GB) consumed by pre-built projects.

2. Data Processing and Transient File Practices

URL Processing: Target URLs submitted by users to convert are crawled in real-time. These URLs and the scraped site contents are processed entirely in-memory or inside temporary server directories for conversion.

Transient File Storage: During code compilation and Next.js validation, the application extracts and builds your project inside a temporary directory (`temp_builds`) on our server. Once the build check is complete and the project is zipped, the ZIP file is transmitted directly to your browser as a download attachment, and the temporary build folder is permanently and completely deleted from our server disk. We do not host or archive user-generated code or project workspaces on our servers.

3. Third-Party Service Providers

We work with trusted third-party providers to secure infrastructure and billing operations:

• Paddle Billing: All payment details, credit card numbers, billing addresses, checkouts, and subscription lifecycles are processed directly by Paddle, our Merchant of Record. Pixxel Studio does not collect or store credit card details or payment information on our servers. Paddle communicates transaction statuses back to our servers via webhook notifications.
• Managed Database Providers: In production mode, user accounts, sessions, and billing metadata are securely stored in a cloud-hosted, managed PostgreSQL database (such as Neon or Supabase). In fallback local development mode, a backup of the local database file is encrypted using AES-256-CBC and synchronized to a private cloud bucket hosted on kvdb.io to ensure database persistence.

4. Data Sharing and Transfers

We do not sell, rent, or lease your personal information to third parties. We do not use third-party advertising cookies or trackers. Your email address is shared only with Paddle to initiate checkout and process subscriptions.

5. Your Privacy Rights and Data Deletion

You have the right to request access to the personal data we hold about you or request its complete deletion. Since we only store your email address, session details, and basic quota usage limits, requesting data deletion will delete your account credentials, active sessions, and usage history from our database. To request data deletion, please contact support at: support@pixxelstudio.site.

6. Changes to the Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date at the top.

7. Contact Information

If you have any questions about this Privacy Policy or our data handling practices, please contact support at: support@pixxelstudio.site.