Privacy Policy

Welcome to Pixuplay ("we", "our", or "us"), accessible via https://pixuplay.xyz. We are committed to safeguarding the privacy and personal data of our users. This Privacy Policy outlines in full detail our practices regarding the collection, use, disclosure, storage, and protection of information obtained through your use of the Pixuplay anime and donghua streaming platform, specifically addressing our integration with Google OAuth 2.0 authentication services.

1. Google OAuth 2.0 User Data Collection

Pixuplay offers an optional "Sign in with Google" feature allowing users to seamlessly create and authenticate their profile. When you choose to sign in with Google, we access only basic, non-sensitive profile information authorized through standard OAuth 2.0 scopes:

OpenID Connect (openid): To uniquely and securely identify your account.
User Profile (https://www.googleapis.com/auth/userinfo.profile): Your public name and profile picture URL.
Email Address (https://www.googleapis.com/auth/userinfo.email): Your primary Google email address for account verification.

Important Clarification on Credentials:

Pixuplay NEVER requests, accesses, processes, or stores your Google account password. All authentication handshakes occur directly within Google's secure authentication servers via official Google Identity Services.

2. How We Use Google User Data

The Google user data we receive is strictly utilized for the following functional purposes:

Account Authentication & Session Management: To verify your identity and maintain your authenticated session across visits.
Cross-Device Cloud Synchronization: To securely associate and synchronize your anime watch history, playback timestamps (resume episode progress), watchlist, and anime favorites across your devices.
Interactive Community Features: To display your chosen nickname and profile avatar when you write episode comments or participate in real-time synchronized co-watching rooms (Nobar Rooms).
Platform Security & Abuse Prevention: To prevent spam, fraudulent activity, and unauthorized duplicate account creation.

3. Google API Services User Data Policy Compliance

Limited Use Disclosure:
Pixuplay's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. AI / Machine Learning Models & Human Access Policy

Artificial Intelligence (AI) and Machine Learning (ML) Models

Pixuplay DOES NOT use Google user data to develop, train, fine-tune, or improve generalized Artificial Intelligence (AI) or Machine Learning (ML) models.

Human Access to Data

Pixuplay DOES NOT allow human employees, contractors, or administrators to read or inspect your private Google user data, unless:

We have obtained your explicit, affirmative agreement for specific troubleshooting;
It is strictly necessary for security purposes (such as investigating malicious abuse, cyberattacks, or system breaches); or
We are legally obligated to do so under valid judicial process or applicable law.

5. Data Sharing, Selling, and Disclosure

We DO NOT sell, rent, lease, or monetize your personal or Google user data under any circumstances.

We do not share your personal information with third-party advertising networks, data brokers, or commercial marketing partners. Your data is accessed solely by Pixuplay's secure backend infrastructure located on our dedicated servers.

6. Data Storage, Security, and Protection

We enforce rigorous enterprise-grade security protocols to safeguard your information:

Transport Layer Security: 100% of data transmitted between your browser and our servers is encrypted using modern HTTPS (TLS 1.2 and TLS 1.3).
Session Token Security: Authentication sessions utilize cryptographically secure, random 256-bit tokens with strict expiration periods.
Database Protection: User records are housed in a hardened, isolated SQLite database behind reverse-proxy firewalls, Cloudflare DDoS shielding, strict rate-limiting, and hardened HTTP response headers (X-Frame-Options, X-Content-Type-Options: nosniff).

7. Data Retention, User Control, and Deletion Policy

We believe you should have complete autonomy over your personal data:

Data Retention: Your profile and synced watch data are retained only as long as your Pixuplay account remains active.
Self-Service Data Purge: You may delete your local watch history, favorites, and cached items at any time through the Settings & Profile menu within the Pixuplay application.
Revoking Access: You can revoke Pixuplay's authorization at any moment directly from your Google Account Security Permissions Dashboard.
Permanent Account & Data Deletion Request: To request the permanent, irreversible erasure of all your cloud records, synced history, and user profile from our servers, simply send an email to [email protected] with the subject line "Account Deletion Request". All associated data will be completely deleted within forty-eight (48) hours of request receipt.

8. Non-Personal Data & Local Storage

For guests utilizing the platform without signing in, Pixuplay utilizes browser localStorage solely on the client device to store episode playback progress and favorite bookmarks. This guest data is stored entirely on your local device and is never transmitted to or stored on our cloud servers.

9. Contact Information

If you have any questions, concerns, complaints, or inquiries regarding this Privacy Policy or our data protection practices, please contact our designated privacy officer:

Pixuplay Operations & Support
Email: [email protected]
Website: https://pixuplay.xyz
Location: Indonesia