Lost in Pixel Studio

Legal

Privacy policy

Last update: 29 August 2026 · Controller: Lost in Pixel Studio

This notice explains which data Lost in Pixel Studio processes, why, for how long, and which rights you have. The site always speaks as a studio, never as a private person in a shop window.

1. Controller

Lost in Pixel Studio. Contact: Contact page and email damotube00@gmail.com.

2. Data we collect

  • Account: nickname, email, date of birth, password hash, sign-up date, last login, last-login IP, internal role, status (active/banned), email confirmation, profile image, biography.
  • Confirmation mail: a six-digit code sent from the inn to the email you chose. It lights the account, is required for every sign-in, for password, email or nickname changes, and to recover access. It is not a newsletter.
  • We do not collect: first name, last name, ID document, home address, phone.
  • Messages: what you write from the Contact page.
  • Technical: session cookie, cookie preferences, security logs (login attempts).
  • Studio measurement: page path and an anonymous id (account if you are signed in, otherwise IP) counted once per day, with no name.
  • Advertising (when AdSense is on): cookies and identifiers from Google and partners, to show ads on all public pages.

3. Legal basis and purposes

  • Performance of the contract: create and run the account, send the email codes, let you into the web games, moderate the inn.
  • Legal obligation: minimum retention, answers to authorities when due.
  • Legitimate interest: security, abuse prevention, staff action log.
  • Personalised ads in the EEA, UK and Switzerland: consent is collected by Google’s certified CMP (Privacy & messaging / IAB TCF), not by a switch on this site.

4. Age

The account is for people 13 or older. We do not direct the service at children under 13 (COPPA). The worlds are not content for early childhood. A Google AdSense account holder must be at least 18: that is a Google rule, separate from the player age line.

5. Google AdSense and partners

Lost in Pixel Studio uses Google AdSense to fund the studio. With a Publisher ID, the Google script loads automatically on all public pages. Third parties, including Google, may place and read cookies or use web beacons and IP addresses to serve ads. How Google uses data on partner sites: How Google uses information from sites or apps that use our services.

You can turn off personalised ads in Google Ads Settings. In the EEA, UK and Switzerland, personalised ads require a Google-certified CMP (IAB TCF v2.3), enabled in AdSense → Privacy & messaging → European regulations. Without that CMP Google may serve only limited or non-personalised ads.

6. Cookies

Details in the cookie notice. The bottom notice is informational: it does not lock the site.

7. Retention

Account: while it stays open, then deletion or anonymisation within a reasonable time unless law or an active ban requires more. Security logs: a few months. Tickets: as long as the case needs them. Page views: aggregates, then periodic cleanup.

8. Recipients

Staff with permission (Helper and above, by role). Technical providers (hosting, later Google). No sale of email lists.

9. Rights

Access, rectification, erasure, restriction, objection, portability, withdrawal of consent. Use Contact to exercise them. You may lodge a complaint with a data protection authority.

10. Security

Hashed passwords, HTTP-only sessions, CSRF on forms, parameterised queries, a mandatory email code for sign-in and for sensitive changes. No system is magic: report holes from the Contact page, without public exploits.