Privacy Policy
Last updated 18 September 2026 · BlueInstinct SL
1. Who's responsible
BlueInstinct SL, a company registered in Spain, is the data controller for pixlet.blueinstinct.com and the Pixlet Store account system. Contact: support@blueinstinct.com.
2. What stays on your device
The launcher and every Pixlet store their own settings - habit history, alarms, timers, market watchlists, photos, music, your WiFi network name and password, macro-pad key mappings - in the device's own flash storage or on its microSD card. None of that is sent to us. Weather, market, and news data is fetched by the device directly from third-party providers (Open-Meteo, Binance, Frankfurter, Yahoo Finance, BBC/Bing) over your own WiFi; we never see that traffic and those providers see it under their own privacy terms, not ours.
3. What we do collect
| Data | Why |
|---|---|
| Email address, password (handled by Firebase Authentication - we never see or store your password ourselves) | Creating and signing in to a Pixlet Store account |
| Device pairing token (an 8-character code) | Proves a download request came from a registered account; doesn't identify which physical device it is |
| Purchase records: order id, email, which Pixlet(s), amount, currency, license key, key status | Sent to us by Lemon Squeezy after a purchase, so we can unlock the right Pixlet(s) and handle refunds |
Session cookie (__session, HttpOnly) | Keeps you signed in between page loads; strictly necessary, not a tracking cookie |
| Standard server logs (IP address, request time, page requested) | Kept briefly by our hosting provider (Google Cloud Run) for security and abuse prevention, the same as virtually every website |
We don't collect your name, address, or payment card details - Lemon Squeezy collects those directly as the merchant of record for your purchase, under their own privacy policy.
4. Who we share it with
- Lemon Squeezy - processes your payment and sends us the purchase and license-key events described above.
- Google Cloud / Firebase - hosts the website, account system (Firebase Authentication) and the account/purchase database (Cloud Firestore, hosted in the EU). They process data on our behalf and don't use it for their own purposes.
We don't sell your data, and we don't share it with advertisers - we don't run any advertising or analytics trackers on this site at all.
5. Cookies
The only cookie this site sets is the session cookie described above. It's required for sign-in to work and doesn't need a consent banner under EU/UK cookie rules, since it's strictly necessary and not used for tracking or advertising.
6. How long we keep it
Account data is kept for as long as your account exists. Purchase records are kept for as long as required for accounting and tax purposes, typically several years, even if you later delete your account or get a refund. Ask us to delete your account and we'll remove everything else tied to it.
7. Your rights
If you're in the EU or UK, you have the right to access, correct, delete, restrict, or export your personal data, and to object to how we use it. Email support@blueinstinct.com and we'll act on it. You can also complain to your local data protection authority - in Spain, the AEPD.
8. International transfers
Our account database runs in the EU. Some of our providers (Google, Lemon Squeezy) operate globally and may process data outside the EEA under their own standard contractual safeguards.
9. Children
Pixlet isn't directed at children, and we don't knowingly collect account data from anyone under 16. If you believe a child has created an account, contact us and we'll remove it.
10. Changes to this policy
We may update this policy as Pixlet changes. We'll update the date at the top when we do.