Who we are

Controller within the meaning of the GDPR: Arif Erdem, Brunnenstraße 25/2.46, 73430 Aalen, Germany. Email: pixelsouls1@hotmail.com.

Pixel Souls is published by Arif Erdem. For privacy requests, account deletion questions or data access requests, contact us at pixelsouls1@hotmail.com.

Data we process

• Game account: a generated device ID, player ID, authentication token, created/last-seen timestamps and optional linked platform identifiers.
• Local save and cloud save: progress, unlocks, inventory, equipment, materials, currency, settings, language, ad-reward counters, dungeon progress, survival high score and similar gameplay state.
• Community levels: level name, level data, optional nickname, moderation status, play count, like count, report count and timestamps.
• Community safety: reports, report reasons, blocked-player relationships and moderation records needed to review abuse and enforce rules.
• Purchases: product IDs and purchase tokens sent to our server for validation, plus local ownership state for restored purchases.
• Technical data: server requests, status codes, timestamps and security data needed to run the API and prevent abuse.

Ads, consent and purchases

Pixel Souls uses Google AdMob for ads and Google User Messaging Platform for consent where required. Ads may be personalized or non-personalized depending on your consent and platform settings.

In-app purchases are handled by Google Play. Google Play Billing processes the transaction; Pixel Souls receives purchase data only to validate and unlock purchased content.

Community levels

If you submit a level, other players can see the level name, your optional nickname and the level itself. Levels may be reviewed before becoming public. Players can like, play, report or block community content.

Do not put real names, phone numbers, addresses, links or other personal data into level names, nicknames or level content.

In-game deletion and account deletion

The in-game delete flow is available in the game settings. After confirmation, it resets your local save data and requests deletion of your submitted community levels from the server.

This means levels you created and submitted yourself, including pending, approved or rejected community levels, are removed from the community backend. This cannot be undone.

The in-game flow does not delete purchase history held by Google Play, and it does not by itself erase every remaining server record that may be needed for security, purchase validation, legal obligations or abuse prevention. For full account/data deletion requests, contact pixelsouls1 [at] hotmail.com.

Retention

We keep gameplay, account and community data as long as needed to provide the game features, operate the community, prevent abuse, validate purchases and comply with legal obligations. Community levels are removed when you delete them or use the in-game delete flow.

Your rights

Depending on your region, you may request access, correction, deletion, restriction or portability of your personal data. You can also object to certain processing. Send requests to pixelsouls1 [at] hotmail.com.

Where processing is based on your consent, you can withdraw it at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence (Art. 77 GDPR).

Website: hosting and server logs

The website pixel-souls.com is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open the website, your browser automatically transmits technical data that Cloudflare processes on our behalf to deliver the pages and protect them against attacks: IP address, date and time of the request, requested URL, referrer URL, browser type and version, operating system and HTTP status code.

The legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor under its Data Processing Addendum. Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are additionally covered by the EU Standard Contractual Clauses. We do not use this data to identify visitors and do not combine it with other data. Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/

Website: no cookies, no tracking, no ads

The website does not set cookies and does not use analytics, tracking pixels, fingerprinting, advertising or social media plugins. There is no user account, no contact form and no newsletter on the website. We do not create visitor profiles.

Website: language setting

The language you choose, or the language detected from your browser, is stored in your browser's local storage under the key "i18nextLng" so the website opens in your language next time. This value stays on your device and is never sent to us or to anyone else.

Storing it is strictly necessary to provide the language function you use (Section 25(2) No. 2 TDDDG), so no consent is required. You can delete it at any time in your browser settings.

Website: fonts

All fonts are hosted on our own website. Your browser does not connect to Google Fonts or any other font provider.

Website: YouTube trailer

The trailer page embeds a video from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The video is not loaded automatically: until you click play, only a preview image from our own server is shown and no connection to YouTube or Google is established.

Only after you click play is the YouTube player loaded from youtube-nocookie.com (YouTube's privacy-enhanced mode). Google then receives your IP address and technical information about your device and browser, and may store cookies or similar data in your browser once the video plays. The legal basis is your consent, given by clicking play (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future by not starting the video again and deleting YouTube data in your browser.

Google may process data in the USA; Google is certified under the EU-U.S. Data Privacy Framework. Google privacy policy: https://policies.google.com/privacy

Website: external links

The website links to Google Play, Instagram and our YouTube channel. These are plain links: no data is transferred to these services until you click one. After clicking, the privacy policy of the respective provider applies.

Contact by email

If you contact us by email, we process your email address and the content of your message to answer your request (Art. 6(1)(b) GDPR for requests about the game, otherwise Art. 6(1)(f) GDPR). We delete this correspondence once it is no longer needed, unless legal retention obligations apply.

Children

Pixel Souls is not intended to collect personal data from children without the required consent. If you believe a child provided personal data, contact us so we can review and delete it where required.

Changes

We may update this Privacy Policy when the game, backend, store requirements or legal requirements change. The current version is always available on this page.