Privacy Policy

Last updated 6 November 2026.

1. Scope

This policy covers AIUGC at aiugc.chenfengliu.com and api.aiugc.chenfengliu.com, including the public game at /play. Pixels operates it and decides how this data is used. The policy does not cover the Pixels game, your wallet software, or Google’s own sites.

2. What we store

Your account. Your Google account ID, email address, name and profile picture link, which Google gives us when you sign in, plus when the account was created and how much of your limits you have used.

The waitlist and access grants. The email address you enter, which we do not verify. If we give an email address access, we store that address, who granted it and when.

Your work. Your boards and messages, your prompts along with the expanded versions we generate from them, your settings and presets, your uploads, and the images, animations and audio you generate. Files are private in Google Cloud Storage and reach your browser through links that expire within an hour.

Your usage. For each job: what kind it was, the model, tokens, GPU time, its settings and prompt, its result and any error. We also record what was stored and deleted, and how much space it took.

API keys. A hash of each key, never the key itself, plus its visible prefix, its name and when it was last used.

The sign-in check. Our own human check records how your pointer moved and how long you took while solving it, and we use that only to tell people from bots.

The public game. The name you type, a random player ID kept in your browser, your run’s stats and your IP address, which we use to limit abuse. Your name and score are public on the leaderboard.

Wallets and deposits. If you link a wallet: its address and when you linked it. For each deposit: the transaction hash, sending address, network, token, amount, block, price and fee used, and what was added. Most of that is already public on the blockchain. Every change to your balance is an entry in a ledger.

Messages to us. Whatever you send us, and our replies.

Server logs. Our web server and app write ordinary logs, which include IP addresses and browser details.

3. Cookies and browser storage

We set no cookies of our own. Your browser’s local storage keeps your session token, your sign-in check pass and settings such as your last board, and in the game your name and player ID.

The Google sign-in button comes from Google, and Google may set its own cookies for it under Google’s Privacy Policy. There are no advertising cookies, no analytics scripts and no other third-party trackers on this site.

4. Who else sees it

• Google Cloud runs the server, database, file storage and GPU machines. The server and database are in Montreal, Canada. Files and GPU machines are in the United States.
• Google’s Gemini models, through Google Cloud Vertex AI, receive your prompts and any images a job uses, and make the images. We do not send your name or email address with them.
• Anthropic’s Claude models, served through Google Cloud Vertex AI, receive your prompts and images when the app expands a prompt or reads an image, also without your name or email address.
• The animation, background removal and audio models run on GPU machines we rent from Google Cloud, not at an outside AI company.
• Google sign-in confirms who you are when you log in.
• Blockchain services (public network nodes and Alchemy) let us read a deposit transaction, and CoinMarketCap gives us the PIXEL price. Only public chain data is involved, and we send them nothing about you.
• Our team can open your account and your work when they need to fix a problem, answer a request or look into abuse. Team members can see who owns jobs in the shared GPU queue.

Beyond that we share information only where the law requires it, to protect people or the service from fraud or abuse, or with whoever takes over the service, who would remain bound by this policy. We do not sell it and we do not share it for advertising.

5. Training

Your prompts, uploads and results are not used to train any model. We do not train models ourselves, and we use Google and Anthropic on business terms, under which what we send is not used to train their models. Google may cache that data for up to 24 hours and may log prompts to detect abuse, under its own rules.

6. Why we use it

• To provide the service you asked for (contract): your account, your work, jobs, balance and support.
• To keep it running and fair (legitimate interests): security, abuse prevention, limits, cost tracking and fixing faults.
• To meet legal duties (legal obligation): financial records and lawful requests.

7. How long we keep things

• Your work. Until you delete it or your account is closed. Deleting a board removes its messages and images. Removing a single card from a board does not delete the image behind it.
• Your account, usage and job records, API key records and sign-in checks. Until your account is closed. Job records can include a prompt, so they can outlast a board you delete.
• Deposits and the ledger. Kept permanently, even after an account closes. They are financial records, and we are not able to erase them on request.
• The waitlist and access grants. Until we remove them or you ask us to. Removing a grant ends that access.
• Game runs. For as long as the leaderboard keeps them, or until you ask us to remove them.
• Messages to us. As long as we need them to deal with your request and keep a record of it.
• Server logs. While they are useful for running the service, then rotated away.
• Backups and disk snapshots. Can hold deleted data until we delete them.

8. Your choices and rights

You can delete boards and revoke API keys in the app yourself. For anything else, including a copy of your data, a correction, deletion, or closing your account, write to chen@pixels.online from the email address on your account. We will answer within 30 days. We cannot erase anything from a blockchain, and we keep the financial records in section 7.

Depending on where you live, the law may also give you the right to object to or restrict how we use your data, to take your data elsewhere, and to complain to your data protection authority. Californian residents can ask what we hold about them and ask us to correct or delete it, and we will not treat anyone worse for asking. We do not sell or share personal information as California law defines those terms.

9. Moving data between countries

We process data in Canada and the United States, and Google’s AI models may process it elsewhere. Where the law requires a safeguard for moving personal data out of your country, we rely on one, such as the standard contractual clauses in Google Cloud’s terms.

10. Security

The site is served over HTTPS, files are private and reachable only through short-lived signed links, and API keys are stored hashed. Access to the database is limited to the people who need it. No service is perfectly secure, so keep your Google account and your API keys safe.

11. Children

AIUGC accounts are for people 18 or older, and nothing here, including the public game, is aimed at children. If you believe a child has given us information, write to chen@pixels.online and we will delete it.

12. Changes

When this policy changes, the date at the top changes with it, and the current version is always here. A change that materially affects what happens to your work will be announced in the app before it takes effect.

13. Getting in touch

Privacy questions and requests go to chen@pixels.online. The Terms of Service cover the rest of the relationship.