1. Information We Collect

a) Account Information

When you register, we collect your username, email address, and a hashed password. If you sign in through a third-party provider (Google or Apple), we receive your name, email address, and a unique provider identifier. We do not receive or store your third-party password.

b) Game Data

We store your in-game progress, including character stats, inventory, achievements, guild membership, and quest completion. This data is necessary to provide the Game experience.

c) Session & Security Data

We use session cookies to keep you logged in and to protect against cross-site request forgery (CSRF). Session data includes your session token, last active timestamp, and IP address for security purposes (e.g., rate limiting login attempts).

d) Usage Data

We may collect basic usage information such as login times, session duration, and general gameplay activity. This helps us improve the Game and diagnose technical issues.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Game.
• Authenticate your identity and secure your account.
• Save and restore your game progress.
• Communicate with you about account-related matters (e.g., password resets, security alerts).
• Enforce our Terms of Service and prevent abuse.
• Improve, test, and update the Game.

3. Information Sharing

We do not sell, rent, or trade your personal information. We may share limited information in the following circumstances:

• With other players: Your display name, avatar, guild membership, and gameplay stats may be visible to other players as part of normal Game features (leaderboards, guilds, PvP).
• Service providers: We may use third-party hosting, infrastructure, or analytics providers that process data on our behalf under strict confidentiality obligations.
• Legal requirements: We may disclose information if required by law, regulation, or legal process, or to protect the rights, property, or safety of GenericPixels, our users, or the public.

4. Cookies & Local Storage

Pixel Chicken uses:

• Session cookies: Essential for authentication. These expire when you close your browser or after a period of inactivity.
• Session storage: Used to store your CSRF token and temporary game state within a single browser tab. This data is not shared across tabs or persisted after the tab is closed.
• Local storage: Used to store non-sensitive preferences (e.g., control settings, tutorial completion status).

We do not use third-party tracking cookies or advertising cookies.

5. Data Retention

We retain your account and game data for as long as your account is active. If you request account deletion, we will remove your personal data within a reasonable timeframe, subject to any legal obligations to retain certain records. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics purposes.

6. Data Security

We take reasonable measures to protect your information, including:

• Passwords are stored using secure one-way hashing (never in plain text).
• Session tokens are generated using cryptographically secure random values.
• CSRF protection on all state-changing requests.
• Rate limiting on login attempts to prevent brute-force attacks.
• HTTPS encryption for all data in transit.

No system is perfectly secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Children's Privacy

Pixel Chicken is open to players of all ages. We do not knowingly collect personal information from children under 13 without parental consent. If you are a parent or guardian and believe your child under 13 has provided us with personal information without your consent, please contact us and we will promptly delete that information.

We encourage parents and guardians to monitor their children's online activities and to help enforce this Privacy Policy.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal data.
• Object to or restrict certain processing of your data.

To exercise any of these rights, please contact us using the information below.

9. Third-Party Services

If you sign in using Google or Apple, your use of those services is governed by their respective privacy policies. We only receive the information described in Section 1(a) and do not access your contacts, files, or other data from those providers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and may provide an in-game notice. Your continued use of the Game after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

GenericPixels, LLC
Email: support@genericpixels.com