Trust & Privacy

• Sign-in is handled by our managed authentication backend.
• Passwords are never stored in plain text by GeoPixel.
• Sessions are tied to your browser; signing out clears them locally.

• All traffic between your browser and GeoPixel is sent over HTTPS (TLS in transit).
• Database access is gated by row-level security policies so each account can only read and modify its own profile.
• Privileged operations (granting credits, recording purchases, placing pixels) run on the server and are not directly callable by clients.

• Account info you provide: email and username.
• Gameplay data: pixels you place (coordinates, color, timestamps) and your credit balance.
• A signup IP fingerprint, used only to prevent abuse of the one-time signup bonus. It is not exposed to other players.
• Payment records: a Stripe session id, quantity, and amount for each purchase.

Payments are processed by Stripe. Card numbers and payment credentials are entered on Stripe's hosted checkout and never touch GeoPixel servers. We store only the metadata needed to credit your account and produce receipts.

• Lovable Cloud — hosting, database, and authentication backend.
• Stripe — payment processing.
• OpenStreetMap tile providers — map rendering in the browser.

GeoPixel uses storage in your browser to keep you signed in and to remember your language preference. We do not sell your data.

Your profile, credits, and placed pixels are retained while your account is active. Pixels you place remain on the map even after they are conquered by other players, because the game's history depends on them. To request deletion of your account and associated personal data, contact us using the address below.

If you believe you have found a security vulnerability in GeoPixel, please report it privately rather than disclosing it publicly. Use the contact channel below and include steps to reproduce.

Questions about privacy, security, or this page? Reach the GeoPixel team through the support contact listed on the homepage.