Privacy

Your game stays on your machine.

OpenPixo is a desktop app that works inside the game folder you already have. This page explains what stays local, what leaves your computer when you run a task, and what the optional OpenPixo account stores for cloud features.

Effective 2026-11-01 · Applies to the Windows app, optional cloud services and this website.

Operator: Areis Technology, 428 Rean Drive, Toronto, Ontario, Canada.

What stays on your computer

• Your game project. Code, art, audio and everything else stay in the folder you opened. Generated or processed files are written into that project as normal files.
• App data. Conversations, settings, asset indexes, installed skills and MCP configuration are kept in OpenPixo's own local data directory.
• Your API keys. Keys you enter for model or media providers are stored locally and only used to call that provider. OpenPixo keeps them out of your project folder and does not send them to us.

Uninstalling OpenPixo never touches your projects. It also leaves the app's local data in place, so a reinstall can pick up where you left off.

What leaves your computer, and where it goes

"Local first" does not mean "offline model". Agents and generators run on services you choose, so some data has to travel to them:

• Coding agents (for example Codex, Claude Code or OpenCode) receive your prompt, the files you reference, and whatever files they read in your project while working on a task. What the agent sends to its model, and how that is handled, is decided by the agent and the account or provider you signed in with.
• Your own API keys (BYOK). When you generate images, audio or other assets with your own key, OpenPixo sends the prompt and any reference files you selected directly from your machine to that provider. You pay the provider, and their privacy policy and terms apply.
• Things you choose to fetch. Importing a skill from GitHub, or setting up an MCP server that downloads its own dependencies, contacts those sources when you ask it to.

Permission requests let you check what an agent wants to do before it does it. Review them, especially in projects that contain anything you would not want sent to a model provider.

Usage data and telemetry

• Optional usage data (anonymous metrics, and separately, conversation content for quality review) is off by default. You won't be asked to decide on first launch.
• The switches live in Settings → Privacy and stay off unless you turn them on.
• Current OpenPixo builds are not set up to send usage data to OpenPixo, and we do not operate a service that receives it. If that ever changes, it will stay opt-in and this page will be updated first.

Updates

App updates are free. Downloading an update does not require you to upload your project files, prompts or API keys.

The OpenPixo account

An account is only needed for cloud features, including hosted generation with credits. Sign in with an email one-time code or Google. Everything that works locally keeps working without an account. Account data includes:

• Sign-in details: your email address, or the identity Google shares when you sign in with Google. Sign-in is handled by our authentication provider (Supabase).
• Purchases: credit packs and subscriptions, the amount, currency, credits added, payment references and refunds. Payments are processed by Stripe; OpenPixo never sees full card numbers.
• Credit balance and history: every top-up, hold, charge, release and refund, so your balance can always be checked and explained.
• Hosted generation jobs: the service you used, its settings, the credit quote, the job status and where the result is stored for you to download.

For hosted generation, OpenPixo uploads only the prompt and reference files you explicitly select, never your whole project or your local API keys. Those inputs are sent to the media provider running the job. Available services and per-use credit prices are shown in the app before you confirm. Hosted generation results are stored privately for 30 days so the app can download them, then deleted.

Your sign-in session is stored encrypted on your computer using Windows' built-in protection.

Service providers

• Supabase: accounts and data are hosted in the Singapore region.
• Resend: sends sign-in emails.
• Stripe: processes payments. OpenPixo never sees full card numbers.
• Cloudflare: serves this website.

Media providers also process the prompts and reference files needed for the hosted generation service you choose. Their own terms and privacy policies apply to that processing.

Account deletion and retention

To delete your account, email support@openpixo.com from the address registered to it. Account deletion is completed within 30 days. Payment and credit ledger records are kept for 7 years for tax and accounting obligations.

Deleting your account does not delete project files or results you have already downloaded to your computer.

This website

These pages are static files served by Cloudflare: no cookies, no analytics, no tracking scripts, no remote fonts. The home page contains one small inline script for visual effects such as the image carousel; it stores nothing and makes no network requests. Cloudflare may keep standard access logs, such as IP address and the page requested.

Questions

If something here is unclear, or you think OpenPixo is doing something this page doesn't describe, email support@openpixo.com. See Support for what to include.