Pixelrush

Pixelrush · Our commitments

Privacy Policy

This Privacy Policy explains what the Pixelrush website does, and does not do, with information about you. It applies to pixelrush.top and should be read together with our Terms of Service, Medical Disclaimer, and User Agreement.

Effective September 21, 2026

Scope and who is responsible

Pixelrush (“we”, “us”, “our”) publishes and operates the Service, the educational wellbeing library at pixelrush.top. For the purposes of the EU and UK GDPR, the LGPD, and comparable laws, Pixelrush is the controller of the limited information described below.

  • This policy covers the website and the pages we publish. It does not cover third-party websites you reach through an external link, which have their own privacy policies.
  • This version of the Service has no user accounts, no sign-in, no payment flow, no newsletter, and no comment system.
  • Privacy questions, requests, and complaints: [email protected].

Privacy laws and frameworks we respect

We aim to meet the standard of the data protection laws that apply to you, whichever of these frameworks is relevant. Where two laws would give different levels of protection, we apply the stricter one to your request instead of treating your location as a reason for a lower standard.

  • European Union — the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), together with national implementations and the ePrivacy Directive for cookies and similar technologies.
  • United Kingdom — the UK GDPR and the Data Protection Act 2018.
  • Brazil — the General Data Protection Law (LGPD, Lei nº 13.709/2018).
  • United States, California — the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). We do not sell personal information and we do not share it for cross-context behavioural advertising.
  • United States, other states — the Virginia CDPA, Colorado CPA, Connecticut Data Privacy Act, Utah UCPA, Texas DPSA, Oregon OCPA, Montana, and comparable laws create similar rights. This policy describes how to exercise them and how to appeal a refusal.
  • Singapore — the Personal Data Protection Act 2012 (PDPA), including the Do Not Call provisions where they could apply.
  • Canada — the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws.
  • Australia — the Privacy Act 1988 and the Australian Privacy Principles.
  • China — the Personal Information Protection Law (PIPL), including the rights to access, copy, correct, delete, and withdraw consent.
  • If you are unsure which framework covers you, write to us and we will handle your request under the most protective standard available.

The short version

The honest summary is short, because this site is deliberately built to hold as little information as possible.

  • The library search box and category filters run entirely inside your browser. Your search terms are not sent to us and are not stored; they disappear when you reload the page.
  • This version of the site does not run analytics, advertising, heat-mapping, or session-recording scripts, and it sets no cookies of its own.
  • The contact form does not post to a server. It opens your own email application so that you decide whether the message is sent.
  • The pages do load web fonts from Google Fonts, so Google receives the technical details of that request. This is explained in the sections below.
  • Our hosting and delivery providers process routine technical request data, such as your IP address, in order to serve pages and keep the site secure.

Information we collect

We handle three kinds of information, and one of them never reaches us at all.

  • Information you choose to send us. If you email us, including through the contact form, we receive your email address, the name you use, and whatever you write, including any attachment you add. Please do not include sensitive health information.
  • Technical request information processed by our providers. Our hosting and content delivery providers record standard request data: IP address, date and time, the page or file requested, the referring page, browser and device type (User-Agent), and sometimes an approximate region derived from the IP address. It is used to deliver pages, block abuse, and diagnose faults.
  • Information that stays in your browser. Search terms, category selections, and other in-page state live in the page memory only. They are not transmitted to us and are not written to cookies or device storage.
  • Information that third parties receive. When you follow an external link, or when a page loads Google Fonts, the receiving provider sees that request. Those providers act under their own policies.

What we do not collect

To be explicit, this version of the Service does not collect, request, or infer the following:

  • Account credentials, passwords, or profile details, because there are no accounts.
  • Payment card or billing details, because nothing on the site is sold or charged for.
  • Sensitive or special-category data — no health records, symptoms, diagnoses, biometric data, precise geolocation, racial or ethnic origin, religious beliefs, political opinions, trade-union membership, genetic data, or information about sex life or sexual orientation.
  • Advertising identifiers, cross-site tracking pixels, or a marketing profile.
  • Your contacts, calendar, microphone, camera, or files.
  • Personal information from children. The Service is intended for readers aged 13 and over.

How we use information and our legal bases

Each purpose below is matched to the information involved and to the legal basis we rely on under the GDPR and equivalent provisions of the laws listed above.

  • Serving pages and keeping the Service available — provider request data — our legitimate interests in running a working website (GDPR Article 6(1)(f)).
  • Security, abuse prevention, and fault diagnosis — provider request data — legitimate interests in protecting the Service and its readers.
  • Answering your messages, corrections, and privacy requests — your contact details and the content of your message — your request and our legitimate interests in responding, together with our legal obligation to handle privacy requests properly.
  • Improving the library, for example deciding which topics to clarify — aggregated, non-identifying observations such as how many readers asked about one subject. We do not build individual profiles.
  • Complying with the law — information required by a valid legal request — legal obligation (GDPR Article 6(1)(c)).
  • We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not profile you for advertising (GDPR Article 22).

Cookies, local storage, and similar technologies

The Service as currently deployed does not set its own cookies and does not write to localStorage, sessionStorage, or IndexedDB for tracking purposes.

  • No consent banner is shown because the site sets no non-essential cookies. If we ever add analytics, embedded media, or advertising, we will ask for consent first where the law requires it and update this policy before doing so.
  • Requests for Google Fonts are ordinary page resource requests. Google may use its own cookies or identifiers on its own domains, subject to its own policy.
  • You can block or delete cookies and site data at any time in your browser settings, and you can block third-party requests. The site is designed to stay readable if web fonts fail to load.
  • Our hosting and delivery providers may keep request logs for their own security and billing purposes. Those logs are controlled by that provider under its own policy.

Advertising, personalised advertising, and how to opt out

This version of the Service does not display advertising, does not take part in ad auctions, and does not load advertising or cross-site tracking scripts. We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are used in the CPRA.

  • Because we do not sell or share personal information for advertising, there is nothing for you to opt out of on this site. We also honour Global Privacy Control (GPC) browser signals as a valid opt-out preference where the law recognises them.
  • Third-party services may still personalise what you see on their own properties, based on your activity across the web and under your own accounts and settings. You can control that directly:
  • Turn off ad personalisation for your Google account: https://myadcenter.google.com/personalizationoff
  • See how Google uses information from sites and apps that use its services: https://policies.google.com/technologies/partner-sites
  • Industry opt-out tools let you opt out of interest-based advertising from many participating companies at once: the Digital Advertising Alliance at https://optout.aboutads.info and the European Interactive Digital Advertising Alliance at https://www.youronlinechoices.com. Opting out does not remove advertising; it makes it less relevant.
  • If we introduce advertising, sponsored placements, or third-party embeds in future, we will update this policy, add a consent mechanism where one is required, and provide a clear “Do Not Sell or Share My Personal Information” link.

When we share information

We do not sell personal information and we do not trade it. Sharing is limited to the situations below.

  • Service providers, also called processors. Our hosting and content delivery provider processes request data in order to serve the pages, and Google processes the font requests. They act on our instructions under contracts that require confidentiality and appropriate safeguards.
  • Legal requirements. We may disclose information where we are legally required to, or where it is necessary to establish, exercise, or defend legal claims, protect someone’s safety, or prevent fraud or abuse.
  • Business transfer. If the Service is reorganised, merged, or transferred, the information we hold, which in practice means correspondence, may transfer as part of that transaction. We will tell you if that happens.
  • With your direction or consent, for example if you ask us to forward your message to someone else.
  • We do not share information with data brokers, advertising networks, or list-rental services.

International transfers

The Service is delivered to readers worldwide, so provider request data and any correspondence may be processed outside the country where you live, including in the European Economic Area, the United Kingdom, the United States, and Singapore.

  • Because the Service is essentially static, the practical transfer risk is low: there is no account database and no behavioural profile to move.
  • Where a transfer requires a safeguard under the GDPR, the UK GDPR, the LGPD, or the PIPL, we rely on the provider’s appropriate safeguards, such as the European Commission Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision covering the destination.
  • You can ask for more detail about the safeguards that apply to a specific transfer by writing to [email protected].

How long we keep information

We keep as little as possible for as short a time as possible.

  • Library search terms, filters, and other in-page state: never sent to us, held only in page memory, and gone when you reload or close the tab.
  • Hosting and content delivery request logs: retained by the provider for a limited operational period for security, reliability, and billing, typically measured in days rather than months. We do not keep a separate copy.
  • Email correspondence, including contact-form messages, corrections, and privacy requests: kept while the matter is open and normally for up to 24 months afterwards, so that a correction or a previous request is not forgotten. You can ask us to delete it sooner, and we will unless we must retain it for a legal obligation or an active dispute.
  • There is no account data, payment data, advertising profile, or analytics history to retain.

How we protect information

Security starts with collecting less. There is no account database, no payment system, and no advertising profile connected to the Service.

  • Pages are served over HTTPS, so traffic is encrypted in transit.
  • Access to the contact inbox is limited to the people who read and answer messages, and is protected by strong authentication with the email provider.
  • Because the Service is delivered as static files, there is no application database of reader information for an attacker to extract.
  • No system is perfectly secure. If a breach ever affects information we hold, we will notify the affected people and the relevant regulator where the law requires it, and we will explain on this page what happened.

Your rights and how to exercise them

You can exercise the rights below wherever you live. Write to [email protected] and tell us what you would like us to do. We will not discriminate against you for making a request.

  • Rights available under most of the laws listed above: to be informed, to access your information, to correct it, to delete it, to restrict or object to processing, to data portability, and to withdraw consent at any time where consent is the basis. Withdrawal does not affect processing carried out before you withdrew.
  • GDPR and UK GDPR: the rights above, plus the right not to be subject to solely automated decisions with significant effects. You may also complain to your national supervisory authority; the European Data Protection Board lists them at https://www.edpb.europa.eu.
  • Brazil, LGPD Article 18: confirmation that processing exists, access, correction of incomplete or outdated data, anonymisation, blocking or elimination of unnecessary data, portability, deletion of data processed with consent, and information about sharing. You may also petition the national authority, the ANPD, at https://www.gov.br/anpd.
  • California, CCPA/CPRA: the right to know what is collected, to delete, to correct, to opt out of sale or sharing, to limit the use of sensitive personal information, and to non-discrimination. We do not sell or share personal information, and we do not use sensitive personal information beyond the purposes the CPRA permits.
  • Other US states, for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana: the rights above, plus the right to appeal a refusal. If we refuse a request we will explain why and tell you how to appeal to us; if an appeal is refused, we will point you to the relevant attorney general.
  • Singapore, PDPA: access to and correction of personal data we hold, and withdrawal of consent. Complaints can be made to the Personal Data Protection Commission at https://www.pdpc.gov.sg.
  • Canada, PIPEDA: access and correction, and the right to complain to the Office of the Privacy Commissioner at https://www.priv.gc.ca.
  • Australia, Privacy Act: access and correction, and the right to complain to the Office of the Australian Information Commissioner at https://www.oaic.gov.au.
  • China, PIPL: the rights to know and to decide, to access and copy, to correct, to delete, to withdraw consent, and to ask for an explanation of our processing rules. You may also complain to the competent authorities.
  • How we verify and respond: because we usually hold nothing but your email messages, we may ask you to write from the address you used previously. We respond within 30 days, and sooner where local law sets a shorter deadline, for example within 15 days for confirmation and access requests under the LGPD.
  • If you use an authorised agent, for example under the CPRA, we will work with them and may ask for written authorisation. Requests are free unless they are manifestly unfounded or repetitive.

Children’s privacy

The Service is intended for readers aged 13 and over, and we do not knowingly collect personal information from children.

  • We do not ask for a date of birth and we do not operate accounts, so we do not build a record of any child.
  • If you are a parent or guardian and believe a child has sent us information, write to [email protected] and we will delete it once we have verified the request.
  • Where a country sets the age of digital consent above 13, for example 16 in parts of the EU under GDPR Article 8, we expect the involvement of a parent or guardian for readers below that age.

Third-party links

Guides cite studies, product documentation, and other external sources. Those links are published for transparency and further reading, not as an endorsement.

  • Once you follow an external link you leave the Service, and that site’s privacy policy and terms apply.
  • We do not control, and are not responsible for, the cookies, analytics, advertising, or data practices of third-party sites.
  • We do not use social media plug-ins, embedded video players, or comment widgets that would silently send your activity to another company.

Automated decision-making and profiling

We do not use your information to make automated decisions about you, and we do not build behavioural or advertising profiles.

  • The library’s search and filter functions run in your browser and produce on-page results only. Nothing about your use is scored, sold, or used to decide anything about you.

Changes to this policy

We may update this policy, for example to reflect a new feature, a change in the law, or clearer wording. The current version is always published on this page with an effective date.

  • For material changes we will make reasonable efforts to give notice before they take effect, for example by placing a notice on the site.
  • Earlier versions are not kept online indefinitely. If you need the version that was in force when you used the Service, email [email protected].
  • Continuing to use the Service after the effective date means you accept the updated policy. If you do not agree, stop using the Service.

How to contact us

Privacy questions, requests, and complaints are welcome, and a person reads every message.

  • Email: [email protected]
  • Website: pixelrush.top — our Contact page explains what to include, and links to our Terms of Service, Medical Disclaimer, and User Agreement.
  • You always have the right to complain to the data protection authority in your country. We would appreciate the chance to resolve the issue with you first.