Privacy policy

This policy explains how PixelSecret collects and uses your data.

Data controller

The data controller for personal data collected on pixelsecret.fr is Usako Ophélie BOURDON, sole trader (auto-entreprise USAKO), registered with the Annecy RCS under SIREN number 989 210 521. Address: 80 Allée des Eperons, 74330 Sillingy, France. Email: contact@pixelsecret.fr. For any question relating to personal data:
Contact

Data collected

We may collect:

Identity and contact details (email, username).
Account and progress data.
Technical data (IP address, browser).

Purposes

This data is used to:

Manage your account and purchases.
Save your progress.
Improve the service and security.

Retention

Data is kept as long as needed to provide the service or meet legal obligations.

Analytics & Advertising

We use Google Analytics to measure site traffic (anonymised data). We also use Google AdSense to display personalised advertisements. These services may place cookies on your device only after your consent. You can opt out of personalised Google ads at any time via the Google Ad Settings page: https://adssettings.google.com. Some product links are Amazon Associates affiliate links: we may earn a commission on purchases made through these links at no extra cost to you.

Affiliate link click tracking

When you click on an Amazon affiliate link from our articles or supplies pages, we record this click in an anonymised way to measure the interest of our recommendations. To avoid counting the same click multiple times, we use a temporary technical identifier obtained by hashing (SHA-256) your IP address and user-agent, combined with a secret salt. This identifier is not reversible: we never store your IP address in clear text. It is only used for deduplication for 30 minutes, then kept with the click date for statistical purposes (retained for a maximum of 25 months, in accordance with CNIL recommendations). Legal basis: legitimate interest (measuring the effectiveness of our recommendations).

Payments

For Pixel purchases (our virtual currency used to unlock certain colorings), we use Stripe as our payment provider. When you make a payment, your banking details are transmitted directly to Stripe and never pass through our servers. Stripe is PCI-DSS and GDPR compliant. We only retain the Stripe transaction ID, the amount paid, the pack purchased and the payment date, for accounting purposes, refund management and to comply with our legal obligations (retention period: 10 years for accounting records, in accordance with the French Commercial Code). Stripe's privacy policy: https://stripe.com/privacy.

Security

We implement security measures to protect your data.

Your rights

You have the following rights:

Access, correction, and deletion.
Objection and restriction of processing.
Data portability.

To exercise your rights, contact us via the contact form

Complaint to the CNIL

In accordance with French and European regulations (GDPR), you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) if you believe your rights are not being respected. CNIL: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France. Website: https://www.cnil.fr.

Last updated: March 2026.