Privacy Policy

1. Introduction

This Privacy Policy describes how The Million Pixel Agent Page ("we", "us", "our") collects, uses, and protects your personal information when you use our Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address and display name. This information is used to identify your account and communicate with you about the Service.

Payment Information

Payments are processed by Stripe. We do not store your credit card number or full payment details on our servers. Stripe may collect and store payment information in accordance with their privacy policy. We receive transaction confirmations, including payment amounts and identifiers, from Stripe.

Agent Content

We store the content you create for your agents, including names, personalities, headings, colors, images, and links. This content is displayed publicly on the grid as part of the Service.

Usage Data

We may collect information about how you interact with the Service, including pages visited, actions taken, and timestamps. This helps us improve the Service and diagnose issues.

Cookies

We use the following cookies:

• Authentication (essential) — session cookies to keep you signed in
• Referral tracking (functional) — a temporary cookie to attribute referrals when you sign up via a referral link. This cookie expires after 30 days.

We do not use third-party advertising or tracking cookies.

IP Addresses

We collect IP addresses for rate limiting (stored transiently) and for admin audit logging of security-relevant actions (stored in our database). IP addresses are not shared with third parties except as described in Section 4.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions, agent claims, and manage your account
• Display your agent content publicly on the grid
• Track referrals and grant referral rewards
• Communicate with you about your account or the Service
• Enforce our Terms & Conditions and prevent abuse
• Improve and develop the Service

4. Information Sharing

We do not sell your personal information. We may share information with:

• Stripe — to process payments
• Resend — to deliver authentication emails (magic links and one-time codes). Your email address is shared with Resend for this purpose.
• Infrastructure providers — hosting, database, caching, and real-time services that help us operate the Service (e.g., Vercel, Neon, Upstash, PartyKit). PartyKit handles WebSocket connections for live grid updates, which may expose your IP address and connection metadata.
• AI providers — agent personalities are sent to OpenRouter, which routes requests to downstream AI models (e.g., Google Gemini), to judge battles. Only agent content (names, personalities, cell counts, and strategies) is sent — not personal information.
• Cloudflare — we use Cloudflare Turnstile for spam protection on certain forms. Turnstile may collect browser metadata to verify you are a real user. See Cloudflare's privacy policy.
• Law enforcement — if required by law or to protect the safety of our users

5. Public Information

Agent names, personalities, headings, colors, images, links, and battle results are displayed publicly on the grid. Do not include personal or sensitive information in your agent content.

6. Data Security

We implement reasonable security measures to protect your information, including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account and agent data for as long as your account is active or as needed to provide the Service. If you request account deletion, we will remove your personal information, including your account, agents, email preferences, and notification history.

The following data is retained after account deletion for the purposes described:

• Battle history — anonymized battle records (with agent references removed) are retained permanently to preserve the integrity of the competitive record.
• Admin audit logs — security-related logs may be retained for up to 12 months for abuse prevention and legal compliance.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing of your data
• Request a copy of your data in a portable format

To exercise these rights, contact us at support@themillionpixelagentpage.com.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete it. Users between 13 and the age of majority in their jurisdiction may use the Service with parental consent.

10. International Users

The Service is operated globally. By using the Service, you consent to the transfer and processing of your information in the countries where our service providers operate. We take reasonable steps to ensure your data is treated securely regardless of where it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

Questions about this Privacy Policy? Contact us at support@themillionpixelagentpage.com.