PixelVoxelChildren's Data Retention Policy
PixelVoxel · Last updated 24 June 2026 · Reviewed by privacy counsel.
PixelVoxel is a web-only building game for children under 9, so the U.S. Children's Online Privacy Protection Act (COPPA) applies. This policy states, in plain terms, the personal information we collect from children, why we collect it, the business need to keep it, and how long we keep it — and how a parent can review or delete all of it.
How we think about it
- We collect the minimum. We only collect what's needed to run the game and the parent-chosen learning gate — never more as a condition of play.
- We use it only for what we said. We don't repurpose a child's information for new, unrelated uses.
- We don't keep it forever. Information is kept only as long as it's reasonably needed, and a parent can delete everything at any time.
- We delete securely. Data lives on encrypted infrastructure, in transit and at rest, including during deletion.
What we collect, why, and how long
We do not collect a child's real name, birthdate (only an optional coarse age band), email, phone, address, precise location, photos, audio or video, biometrics, or advertising identifiers — and we use no third-party ad SDKs, analytics, or trackers. Puzzle answers are graded on our server and are never stored from the child's device.
| Information | Why we collect it | How long we keep it |
|---|---|---|
| Parent account (sign-in, verified email, display name) | To authenticate the adult who consents and pays | While the account is active |
| Child profile (nickname, avatar, optional age band) | So the child has a saved identity and age-appropriate puzzles | While the account is active |
| Consent record | To evidence parental consent | While the account is active |
| World saves (the child's builds) | To save and reload the child's creations | While the account is active |
| Learning & play-time data | To run the parent-controlled learning gate and time limits | While the account is active |
| License & purchase records | To unlock the paid game and handle refunds | While the account is active (our payment processor keeps the official transaction record per law) |
When a parent deletes the account, all of the above is deleted immediately and fully removed within 24 hours. We don't retain children's data indefinitely; information no longer needed is removed.
Deleting everything
From the in-game grown-up menu, a parent can choose Delete account. To protect against accidental or unauthorized deletion, it re-verifies the parent's identity (a fresh sign-in) and asks them to type a confirmation. It then permanently removes every record about the parent and their children — across our database and the children's saved worlds — in a single, all-or-nothing operation. There is no recovery copy; deletion is final.
Your rights as a parent
- Review / download. From the grown-up menu, Download my data exports a complete copy of everything the account holds.
- Delete / stop collection. Delete account removes all of the child's information and ends collection. You can also simply stop using the service.
- Identity check. Both actions require you to be signed in; deletion adds a fresh re-authentication, so we can be sure the request is really from you.
Who else touches the data
We use a few vetted providers, and none receives a child's data for their own use:
- Cloudflare — hosting, database, and storage. All account data lives here, encrypted at rest, and does not leave Cloudflare.
- Google — parent sign-in only. It receives nothing about the child.
- Lemon Squeezy — our payment processor and merchant of record for the one-time purchase. It handles the parent's payment and keeps the official transaction record.
How we protect it
Data is encrypted in transit and at rest. We maintain a written information security program appropriate to the sensitivity of children's data and our size, with parent-only accounts, server-side validation of everything saved, strict isolation between families, and no third-party trackers. There are no public servers, friend lists, or chat with anyone outside your family — so a stranger can't reach your child by design.
Review & contact
We review this policy at least once a year and whenever our practices change. Questions or requests: [email protected].
Read next: Safety & your child's data · FAQ · Play it free