Legal & Policies

These terms govern access to p1xel.lol. By creating an account or using the service you accept them and agree to follow applicable law.

Your account

Keep your sign-in details to yourself, choose a username you are entitled to use, and publish only material you have the right to publish. You are responsible for everything done through your account. Tell us if you believe an account has been taken over.

Two ways in

You can sign in with a password or, if you link Discord, through Discord's OAuth flow. Two-factor authentication can be enabled per account and is strongly recommended. If you have lost your password but still have Discord, run /resetpass in our bot and it replies with a one-time link that only you can see; the link expires after 15 minutes and signs your other devices out.

Your profile is public

Your username, biography, avatar, banner, links, background, music and any Discord status you switch on are readable by anyone with the link. You keep ownership of everything you upload. You grant p1xel.lol permission to host, cache, format and display it only as far as needed to run the service, and only while it stays here.

Comments, chat and follows

Signed-in members can comment on profiles, reply to each other, like comments and chat messages, follow each other, and use the site-wide livechat. You can delete your own comments and messages at any time, and the owner of a profile or a moderator can remove content on it. Text you post is stored to keep the conversation available to other members; it is not scanned, profiled, or used for advertising.

Acceptable use

Do not use the service to break the law, infringe someone else's rights, publish private or abusive material, harass others, spread malware, interfere with the service, or impersonate a real person. We may restrict or remove content or accounts where that is reasonably needed to enforce these terms, protect users, or obey the law.

Premium

Premium is activated with a valid key. Which features are included may change; the current list is always visible on the dashboard. Premium settings are tied to your account and are switched off again automatically if the Premium ends. No card payments are collected today — if paid plans are introduced, pricing, renewal, cancellation and consumer terms are published before anyone can buy.

Third-party media

Background videos, music and profile links can point to YouTube, Discord or other providers. They are governed by those services' own terms and privacy notices, and p1xel.lol cannot control their availability. Loading them means the visitor's browser connects to them directly.

Ending your account

You can delete your account yourself from dashboard settings; it removes your profile, comments, chat messages, likes and follows. We may suspend or close an account for serious or repeated misuse, for security reasons, or where the law requires it. Rights that cannot legally be waived are unaffected.

The service operator and controller is N/A. Postal address: N/A.This page describes what the current implementation actually stores.

What is stored

• Account: username, internal ID, role, and a password verifier. Passwords are salted and hashed; any legacy credential is upgraded to a hash after your next successful sign-in.
• Security: hashed session tokens with expiry, optional two-factor secret and its recovery codes, and short-lived password-reset tokens.
• Profile, by your choice: biography, profile title, avatar, banner, links, colours, fonts, background and music URLs, Discord user ID, cursor and effect settings, tags, and the comment-field design.
• Community: comments and replies on profiles, livechat messages, likes on both, follow relationships, and @-mentions. Each records who wrote it and when.
• Service: a profile view counter, uploaded media, custom emoji, and an audit log of privileged actions such as role changes, Premium grants and password resets.
• Discord sign-in: your Discord account ID and the basic profile details Discord returns, used to find or create your account.

Why it is used

Account, profile and community data exist to provide the service you signed up for. Session and security data exist to authenticate you and protect the service. Appearance settings are used exactly as you configure them. Optional public display choices — Discord status, tags, view counter — can be switched off in your dashboard.

What anyone can see

Everything on a public profile is public by design: username, biography, avatar, banner, links, background, music and any enabled Discord status. Comments and chat messages are visible to other members. Anything you would not want published should stay off your profile.

Who else is involved

The service runs on Cloudflare Workers, with Cloudflare D1 for storage. Discord is used for OAuth sign-in and, when you enable it, presence is read through Lanyard. YouTube embeds, Google Fonts and any media URL you add may cause the visitor's browser to contact those third parties directly, under their own notices.

How long it is kept

Account and profile records are kept until you delete your account. Session tokens expire after 30 days and are cleared during a later sign-in cleanup. Comments and chat messages stay until they, or your account, are deleted. Nothing is sold or shared for advertising.

Your rights

Depending on applicable law you may ask for a copy of your data, ask us to correct or delete it, ask us to restrict processing, and object to some processing. You can download everything we hold as JSON yourself from dashboard settings, and delete your account from the same place. For anything else, contact the contact address at the bottom of this page. You may also complain to your data protection authority; if the Finnish authority is competent, that is the Office of the Data Protection Ombudsman. The full rules are in the GDPR.

p1xel.lol uses two essential cookies, both HttpOnly, Secure and SameSite=Lax:

• nexus_session — keeps you signed in for up to 30 days.
• nexus_oauth_state — protects the Discord sign-in callback for up to 10 minutes, then deletes itself.

No tracking

There is no analytics, advertising or cross-site tracking cookie, and p1xel.lol does not fingerprint readers. Embedded YouTube content, remote fonts and other third-party resources can set their own cookies when they load; those are governed by the provider's own notice.

Only upload or link to material you own or are licensed to use. You are responsible for the music, video, artwork, avatars and links on your profile. Do not upload or link to unlawful, infringing, non-consensual, hateful, harassing or malicious material.

p1xel.lol hosts content for many users and cannot review every profile. Profile owners and moderators can remove comments and chat messages on their own pages. To report material you believe violates your rights or the law, contact the contact address at the bottom of this page with the profile URL, what is at issue, and enough detail for us to assess it.

Nothing on this page limits rights or remedies you have under applicable law.

Service operator: N/A
Postal address: N/A

Include the username or profile URL and describe what you need. Never send passwords, recovery codes or two-factor secrets by email — we will never ask for them.

Complaints are handled by the operator named above. You may also contact the competent supervisory authority in your country.