Privacy Policy

1. Introduction

Welcome to Pixel Play ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our music streaming application.

By using Pixel Play, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Personal Information

When you choose to sign in with Google, we collect:

• Name: Your full name from your Google account
• Email Address: Your Google email address
• Profile Picture: Your Google profile picture URL
• Google ID: Your unique Google user identifier

2.2 Usage Information

We automatically collect certain information when you use our service:

• Search Queries: Songs and artists you search for
• Playback Data: Songs played, skip actions, and playback duration
• Device Information: Browser type, operating system, and device type
• Local Storage Data: Session information stored in your browser

2.3 Health & Sensor Data

Pixel Play accesses device sensors to enhance your music experience. We do not use this data for health monitoring, medical diagnosis, or fitness tracking purposes. The following sensor data may be accessed:

• Activity Recognition: We detect your current activity (walking, running, driving, or stationary) to adapt the music experience contextually. This data is processed locally on your device and is not transmitted to any server, except in the Pixel Play Car build (see Section 9).
• Step Counter / Pedometer: Step count and cadence data may be accessed during active sessions to provide rhythm-aware music features. This data is stored only in your device's local memory for the duration of the session and is not persisted or shared.
• Motion Sensors (Accelerometer / Gyroscope): We use motion sensor data for shake detection (to trigger shuffle/skip actions) and orientation-based interactions. This data is processed in real-time on your device and is not stored or transmitted, except in the Pixel Play Car build (see Section 9).
• Proximity Sensor: Used to detect when the device is near your ear or face, enabling automatic screen dimming during playback. No proximity data is stored or shared.

2.4 Third-Party Data

We integrate with third-party services that may collect data:

• YouTube: Video IDs, search results, and playback events
• Google OAuth: Authentication credentials and user profile
• Lyrics.ovh: Song title and artist for lyrics fetching

3. How We Use Your Information

We use the collected information for the following purposes:

• Account Management: To create and manage your user account
• Service Delivery: To provide music streaming and playback features
• Personalization: To remember your preferences and session state
• Improvement: To analyze usage patterns and improve our service
• Communication: To respond to your inquiries and provide support
• Security: To protect against unauthorized access and fraud

4. Data Storage and Security

4.1 Local Storage

We store user session data in your browser's localStorage, including your name, email, and login type. This data remains on your device and is not transmitted to our servers except during authentication.

4.2 Service Worker Cache

Our service worker caches application files locally on your device for offline functionality and improved performance. No personal data is stored in the cache.

4.3 Security Measures

• HTTPS encryption for all data transmission
• Google OAuth 2.0 for secure authentication
• No server-side storage of your name, email, Google account data or saved records (Section 9 lists the usage events we do receive)
• Client-side data protection through browser security

5. Third-Party Services

5.1 Google Services

We use Google Sign-In and YouTube API Services. Your use of these services is governed by:

• Google Privacy Policy: http://www.google.com/policies/privacy
• Google Terms of Service: https://policies.google.com/terms

5.2 YouTube API Services

Pixel Play uses YouTube API Services to provide music search and streaming functionality. By using Pixel Play, you acknowledge and agree to:

• YouTube Terms of Service: https://www.youtube.com/t/terms
• YouTube API Services Terms of Service: https://developers.google.com/youtube/terms/api-services-terms-of-service

YouTube API Services may collect certain data as described in the Google Privacy Policy linked above. We do not store YouTube video content on our servers. Records you save keep a YouTube video ID with its title, channel name and thumbnail address, plus the date you saved it and a mood label Pixel Play assigns, on your device; that information is refreshed from YouTube API Services when it is more than 30 days old (see Section 9).

5.3 Revoking Access

You can revoke Pixel Play's access to your data via the Google security settings page at: https://security.google.com/settings/security/permissions

5.4 Lyrics.ovh

We use Lyrics.ovh API to fetch song lyrics. Song titles and artists are sent to their service. Review their privacy policy at their website.

6. Cookies and Tracking Technologies

We use the following technologies:

• localStorage: To maintain user session and preferences
• Service Worker: For offline functionality and caching
• Third-Party Cookies: Google and YouTube may set their own cookies

You can control cookies through your browser settings. Disabling cookies may limit functionality of Pixel Play.

7. Your Privacy Rights

7.1 Access and Control

You have the right to:

• Access: Request information about data we store about you
• Correction: Update your personal information through Google account settings
• Deletion: Clear your data with Clear My Data in the app, or by logging out and clearing browser storage
• Opt-Out: Use Guest Mode to avoid providing personal information

7.2 GDPR Rights (EU Users)

If you are in the European Economic Area, you have additional rights:

• Right to data portability
• Right to restriction of processing
• Right to object to processing
• Right to lodge a complaint with supervisory authority

7.3 CCPA Rights (California Users)

California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Opt-out of the sale of personal information
• Request deletion of personal information

Note: We do not sell your personal information.

8. Children's Privacy

Pixel Play is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

9. Data Retention

We retain your information only as long as necessary for the purposes outlined in this Privacy Policy. Below are the specific retention periods for each type of data we collect:

• Session & Authentication Data: Stored in your device's localStorage for the duration of your active session. Data is automatically removed when you log out. If you do not log out, session data is retained for a maximum of 12 months from your last use, after which it expires.
• Play History & Preferences: Your recently played songs (up to 20 entries, each with a YouTube video ID, title, channel name and thumbnail address) are stored locally on your device; entries older than 30 days are removed when you open your Records. Search cache and learned preferences are stored locally on your device for up to 12 months. Search cache entries expire automatically after 6 hours (24 hours for automatic suggestions).
• Saved Records (your library): Each saved song keeps a YouTube video ID with its title, channel name and thumbnail address on your device only. When you open your Records, any record whose title, channel name and thumbnail are more than 30 days old is refreshed from YouTube API Services; a record whose video no longer exists is removed, and if YouTube cannot be reached the record is kept and refreshed the next time. You can remove records one by one, clear the library, or use Clear My Data (see Section 10).
• Cached Files (PWA): Cached via service worker for offline functionality. Retained until you clear your browser cache, the service worker updates, or a maximum of 30 days since last access.
• Health & Sensor Data: Step count and activity data (if collected) is processed locally on-device only and is never transmitted to our servers. This data is retained on your device until you clear app storage or uninstall the app.
• Google Account Information: Name, email, and profile photo received via Google Sign-In are stored locally on your device only and retained until you log out. We do not store Google account data on any server.
• Analytics Data: Anonymized usage analytics (via Google Analytics) are retained as per Google's standard retention policy of 14 months.

Usage events sent to our analytics service: Your play history, saved records and preferences stay on your device. Pixel Play does, however, send short usage events to an analytics service run by Creative Pixels on Amazon Web Services. The events are session_start, heartbeat (about once a minute while the app is open and visible), play, pause and error.

• Every event: a random ID that the app creates and keeps on your device, a random session ID, the time, the app version, the device type (iOS app, Android app, the Pixel Play Car build, mobile web or desktop web) and your language code.
• play: whether you chose the song or autoplay did, and coarse mood, genre and region labels that the app works out on your device.
• pause: a short code for why playback paused (for example, you tapped pause), which can include how many seconds the song had been playing.
• error: a technical error message and where in the app it happened, or the YouTube player's error number when a song cannot be played.
• session_start: the web address of the page that sent you to Pixel Play (first 80 characters).
• Pixel Play Car build only: the car's speed in km/h and two road-motion numbers.

Like any internet request, each event reaches our server with your network (IP) address. The server uses it to work out an approximate location (country, city and map position) with an IP-location lookup; the address itself is not stored in the event record.

Never sent to this service: the title, channel name, video ID or thumbnail of any song, your YouTube or Google account, your name, email address or phone number.

Visit statistics (PixelData): Pixel Play also sends page-view, scroll-depth and visit-length records to PixelData, a second analytics service run by Creative Pixels, each with the page address, the page that referred you, your screen and window size, language, time zone, browser, operating system, device type and a random visitor ID. It does not record what you tap, and no song title or channel name is sent to it.

Google Analytics: Pixel Play also sends usage events to Google Analytics (for example the sign-in method, the words you search for, how long you listen, and app-install and visit information). These events contain no song title, artist or channel name and no video ID. Google's own measurement script can additionally report video playback (a video's title and link) unless that is switched off in our Google Analytics settings.

10. Data Deletion — How to Delete Your Data

You have the right to delete your data at any time. Since your sign-in details, play history, saved records and preferences are stored locally on your device, you have full control over deletion:

Clear My Data (fastest): open your profile in Pixel Play and choose Clear My Data, then confirm. It removes everything Pixel Play has saved in local storage on this device: your Records library, play history and play counts, learned preferences, your name and photo, settings and cached search results. It cannot be undone, and the app then restarts clean. It does not remove cookies set by Google or YouTube, or the offline app files kept by the service worker; use the browser steps below for those.

10.1 Delete All Data (Complete Reset)

1. Open Pixel Play in your browser or app
2. Log out from your account (click your profile → Log Out)
3. Clear your browser's site data for creativepixels.in:
   • Chrome: Settings → Privacy → Clear browsing data → Select "Cookies and site data" → Clear
   • Android App: Settings → Apps → Pixel Play → Storage → Clear Data
   • iOS App: Settings → Pixel Play → Clear Data, or uninstall the app

10.2 Delete Specific Data

• Play History: Open browser Developer Tools → Application → localStorage → delete the playHistory key
• Search Cache: Automatically expires after 6 hours, or clear localStorage keys starting with search_cache_
• Learned Preferences: Delete the pixelPlayIntelligence key from localStorage
• Authentication: Log out to immediately remove all sign-in data

10.3 Request Deletion via Email

If you need assistance deleting your data or want confirmation that your data has been removed, contact us at connect@creativepixels.in. We will respond to deletion requests within 30 days.

10.4 Third-Party Data

To delete data held by third-party services used by Pixel Play:

• Google Account: Manage or revoke Pixel Play's access at myaccount.google.com/permissions
• Google Analytics: Opt out using the Google Analytics Opt-out Browser Add-on

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.

Continued use of Pixel Play after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: