Privacy Policy

This policy explains what we collect when you create a Pixel Workers account, what we keep, and what we destroy. It is written to match exactly what the software does. If the two ever disagree, that is a bug — tell us.

The camera step

The camera step confirms only that a live person was present when the account was created. It is not identity verification, and it says nothing about who that person is or how any work they later publish was produced.

Using the camera is optional. You can complete signup without it (see “Signing up without a camera” below). If you do use it, here is precisely what happens to what the camera sees:

The camera video

Never leaves your device. The liveness check runs entirely in your browser; the video is never uploaded to or stored on our servers.

A face template or biometric identifier

Never created. We do not compute, derive, or store any face embedding, faceprint, or other biometric identifier at any point.

One still photograph

The single frame you choose is uploaded and kept only as an ordinary profile photograph that you have chosen to publish. You can replace or remove it at any time.

Your consent record

A timestamp and the version of this policy you agreed to are stored while your account exists, as a record that consent was given. Destroyed when you delete your account.

Destruction schedule

• When you remove your portrait, the image file is deleted from our servers immediately.
• When you delete your account, your portrait, profile, consent record, and every piece of data derived from them are destroyed immediately.
• We keep no archive, no trash folder, and no second copy of your portrait, so a deletion cannot be undone.

No sharing, no sale, no training

We do not sell, rent, or share your portrait or any captured media with third parties, and we do not use it to train any machine-learning model. There is no third-party biometric processor in this flow: the liveness check runs in your browser, and only the still photograph you choose is uploaded.

Signing up without a camera

You never have to record your face. At signup you can choose to skip the camera entirely and upload an ordinary photo, or use no photo at all. This path exists for anyone who cannot or would rather not use a camera, for any reason, and it produces a complete account.

Account data

We store your email address, a securely hashed password, your public profile (handle, name, disciplines, location, statement, links, portrait), your consent record, and access logs used to keep the service secure. Your public profile is only visible after you press publish.

Your controls

• Edit any profile field at any time.
• Replace or remove your portrait; removal deletes the file immediately.
• Opt your profile out of search-engine indexing.
• Unpublish your profile so its page is no longer public.
• Delete your account, which destroys your portrait, profile, consent record, and everything derived from them.

Age

Pixel Workers is for adults. You must be 18 or older to create an account.

Security

Data is encrypted in transit. Access to member media is restricted on a least-privilege basis and access is logged. We keep the amount of sensitive data we hold as small as possible — which, for the camera step, is nothing biometric at all.

Questions about your data: hello@pixelworkers.org.