Privacy Policy
This notice explains what Pixelarrow collects, why, who can see it, how long we keep it and how to delete it. It covers the game in Telegram, the game on the web and pixelarrow.app.
1. Who we are and how to contact us
The controller of your data is Vladlen Gladis, Germany. For any privacy question or request, write to privacy@pixelarrow.app.
2. What we collect
| Source | Data |
|---|---|
| Telegram, when you open the game (signed launch data) or message the bot | Your Telegram user id, first name, username, language and Premium flag |
| You | Your email address and password (we store only a hash of the password, never the password itself), your display name, the names of clans you create, your notification settings and time zone offset (not your location), and what you write to support |
| Your play | Game progress, heroes, armies, items, land and camps, clans, ratings and ranks, battles and their order logs, marketplace listings, Drachmae balance and history |
| Purchases | The Telegram Stars payment charge id, the product, the amount, the dates and the refund status |
| Technical | Your IP address (used only for the moment of the request, for rate limits and the Turnstile bot check; it is not stored with your account), the device and browser family shown in your list of logged-in devices, crash reports, and product analytics events (you can turn these off) |
We do not collect your phone number, contacts, precise location or payment card details. Payments go through Telegram Stars; we never see your card.
3. Why we use it
- Running your account and the game: signing you in, saving your progress, verifying battles, notifications you asked for, answering support. Legal basis: performance of our contract with you.
- Security and abuse prevention: rate limits, bot checks, fair play, stopping banned players from coming back. Legal basis: our legitimate interest in a safe, fair game.
- Purchase records: delivering what you bought, refunds, tax and bookkeeping. Legal basis: legal obligation.
- Analytics and crash reports: understanding how the game is played and fixing errors. Legal basis: our legitimate interest. You can turn analytics off in Settings (Usage statistics).
4. What is public
Other players and visitors can see your display name, your ranks and ratings, war standings, your clan's name and who is in it. In the game, other players also see your heroes, your land on the war table and your marketplace listings.
Some of this also appears on the public leaderboards at pixelarrow.app. To hide yourself there, turn off Show me on public leaderboards in Settings → Account. In-game boards always show you.
Display names. Every new account gets a generated name, such as SwiftArcher4821. We never use your Telegram first name or username as your name, and we never show them to other players. You can rename yourself: the first change is free, then once every 30 days. Names must follow the game's rules, and a moderator can reset a name that breaks them.
5. Who processes your data
- Cloudflare, as our processor: hosting the game and the website, the database, sending our emails, and the Turnstile bot check on web sign-up and log-in.
- Telegram: the Mini App platform, the bot and Stars payments, under its own privacy policy.
We do not show ads, and we do not sell or share your data for advertising.
6. How long we keep it
- Account and game data: while your account exists. It is deleted when you delete the account (see section 8).
- Purchase records: 5 years, for tax and bookkeeping, even after the account is deleted. They keep no name, username or Telegram id.
- Sessions: up to 30 days on the web (ended after 7 days without use), 24 hours in Telegram. You can log out sooner.
- Email links: verification links last 24 hours, password reset links 30 minutes.
- Analytics events: about 3 months. They carry a pseudonymous player number, not your name.
- Database backups: 30 days.
- Banned players: a one-way hash of the banned sign-in (not the email or Telegram id itself) for 180 days, so the ban can't be avoided with a new account.
- Notification queue: a few days. Support requests: until resolved and for up to 12 months after, and never past the deletion of your account.
- Your IP address: only for the request itself. Cloudflare's own request logs follow Cloudflare's retention.
7. Your rights
Depending on where you live, you can:
- Access your data, or get a copy of it: write to privacy@pixelarrow.app. There is no automatic export yet; we send it by email.
- Correct it: rename yourself or change your email in Settings → Account, or write to us.
- Delete it: in the game, immediately (section 8).
- Object to analytics: turn off Usage statistics in Settings.
- Complain to your data protection authority.
We answer requests within 30 days.
8. Deleting your account
Go to Settings → Account → Delete account. You'll be asked to confirm it's you and to type DELETE. In Telegram, the bot's /delete_my_data opens the same page. Deletion is immediate and can't be undone. If the account has an email, we send a confirmation there.
Deleted: your campaign, heroes, items and gold; your duel army, rating and Glory; your war profile, army and camps (you leave your clan, and leadership passes on); Drachmae, the season pass and looks; your market listings with the items in them; your display name, email, password hash and Telegram sign-in; your sessions, notification settings and support requests. Your email and Telegram account are free to use for a new account.
Kept, without your name:
- Purchase records and what they unlocked, for the period in section 6. Paid items are lost and are not refunded (see Refunds).
- The Drachmae and marketplace audit logs and the moderation log, under a pseudonymous number, so the game's economy and moderation can still be checked.
- Other players' battle history, which shows "Deleted player".
- If you were banned: the sign-in hash described in section 6, for 180 days.
What we can't delete: analytics events (pseudonymous, gone after about 3 months), database backups (gone after 30 days), bot messages already in your Telegram chat (you can delete them in Telegram), and Cloudflare's own request logs.
Only want to stop using one sign-in? If your account has both Telegram and an email, you can remove one of them in Settings → Account instead, and keep playing with the other.
9. Children
You must be at least 16 years old, and old enough to use Telegram where you live, to play Pixelarrow. If you believe a child has given us data, contact us and we will delete it.
10. Security
Passwords are stored only as a salted, peppered hash (PBKDF2). Links in our emails are single use and expire. You can see the devices you are logged in on and log them out in Settings → Account. We email you, and message you in Telegram, when a sign-in method is added, removed or changed. Linking Telegram to a web account needs confirmation on both sides.
11. Changes to this notice
We post updates here with a new effective date, and announce important changes in the game or the bot. This notice is also available in Russian. If the two versions differ, the English version prevails.