Legal
Privacy Policy
Last updated: 8 October 2026. We handle personal data under the Digital Personal Data Protection Act, 2023 (India) and the rules made under it.
Who we are
Pixel Tree Digital, a proprietorship of Sattanathan S, B204, Casagrand Royce, Ayyappa Nagar, K R Puram, Bengaluru, Karnataka 560036, India. For any question about your personal data, contact Sattanathan S at support@pixeltrees.in or +91 90087 53008.
You must be 18 or older to buy, create an account or enter the contest. We do not knowingly collect data from children.
What we collect
- Buyers: email address, the name, link and image you submit, your state (for the GST invoice), your city, and payment metadata. Optional: a phone number and a GSTIN, used only for your invoice and for support. Card and UPI details go directly to Razorpay — we never see or store them.
- Picture checks: every uploaded picture is checked by a person, and first by an automated model (Cloudflare Workers AI) that can hold a picture for that person's review. The model never approves a picture on its own.
- How the site is used: page views and button presses (for example "claim started" or "block opened") with a random session code stored in your browser, so we can see which steps work. We do not use it to identify you. Your browser also keeps a random visitor code for the "people here now" count, your light or dark theme, and, for 30 days, the website or campaign that brought you here, which is sent with an order so we can tell which channel works.
- Shown publicly: the image, link, name and city on your blocks appear on the wall and on the Browse page, so visitors can find businesses in their city. Your email, your state and your payment details are never shown publicly.
- Our Instagram page (optional): If you tick 'You may feature my block on @thepixeltrees', we may post your block's picture, name and profile handle on our Instagram page. Untick it in My account, or ask us at support@pixeltrees.in to take a post down.
- Visitors: standard server logs (IP, user agent) via Cloudflare, kept for security and abuse prevention.
- Public contact email (optional): a buyer with no website can give a
separate email for visitors to contact them. How it works:
- You choose. The field is optional. We store the address only if you tick "Show this email on my block so visitors can contact me". Without the tick, nothing is stored.
- Purpose. The only use is the "Email them" button on your block, which opens a visitor's own mail app addressed to you. We do not email that address ourselves and never add it to any list.
- Not printed. The address is never written into the wall page or the wall's public data, so it cannot be collected by bots. The button reaches it through a redirect on our server, and that tap is counted in your click statistics exactly like a website click.
- Separate from your receipt email. The email you buy with is for your receipt, invoice and sign-in, and is never shown publicly.
- Your picture. The picture on a block is served only to the wall page that draws it: it cannot be opened as a link, saved from the block, embedded on another site or fetched by a bot. You can download your own file from My account. We cannot prevent someone photographing their own screen, and we say so.
- Removal. Open My account, find the block, and press "Remove" next to the public contact email. It is free and takes effect at once; the address is deleted from the block. You can also email support@pixeltrees.in and we will remove it for you.
- Clicks on a business's link: when you open a business's link from the wall we record the time, the approximate city, state and country that Cloudflare reports for the connection, and a visitor code that changes every day. The code is made from your connection with a random key that we delete the next day, so it cannot be traced back to you or linked across days. We store no IP address for this. The business sees only totals: clicks, visitors per day and top cities.
- Contest winners: to hand over a prize we collect PAN and a government photo ID with address, to verify identity, age and state, and to deposit the tax on the prize. Please give a masked Aadhaar or another ID. We keep these as long as the tax laws require.
- Contest entrants: name, email and tagline, plus a hashed connection identifier kept for one hour to limit abuse. Used only to run the tagline contest and to contact winners. Non-winning entries are deleted or anonymised within 90 days after the winners are announced; the three winning taglines and first names stay on the wall page for the season, then are removed.
- Wall interest list: your email, the wall you picked, and a hashed connection identifier kept for one hour to limit abuse. Used to send one email when that wall opens. Deleted within 30 days after that email. No marketing list.
- Messages: If you use Messages, we store the messages you send and receive, who they were between and when, so that we can show them to you and the other member, send you an email alert about a new message, and review a conversation that someone reports to us; we show the other member only your block's display name, never your email or phone number, and you can stop optional alert emails with the unsubscribe link.
What we use it for
- Processing your purchase, moderation decisions, refunds, receipts and GST invoices.
- Service emails about your blocks: the receipt, "your block is live", renewal reminders before your 12 months end, and updates on the saplings your blocks fund.
- A few optional emails: tips in your first week, a monthly report of your block's views and clicks, and one reminder if a payment did not finish (only if you ticked that box at checkout). Every one of these has an unsubscribe link, and unsubscribing never stops the service emails.
- Responding to takedown or legal requests.
- Running the tagline contest and telling you when a wall you asked about opens.
What we don't do
We don't sell personal information or send marketing email to anyone who did not buy from us or ask to hear from us. No page on this site runs third-party ad trackers, with one exception described next: the arcade game at /play.
Advertising — the /play game only
The Green Diwali Catch game may show an advertisement from Google between rounds, when you choose "Play again" (never during play, never on your first round, and not more than once per three rounds). Google serves these through its AdSense programme and may use cookies or device identifiers to show and measure the ads, as described in Google's advertising policy. You can manage ad personalisation at adssettings.google.com. We never share your name, email, order or wall data with Google; the ads see only what any visitor to the game page reveals (a browser on a page). No other page of the site carries ads.
Apps
The pixeltrees apps for Android and iOS show this website inside the app. Everything on this page applies to them in the same way. In addition:
- No extra data. The apps do not read your contacts, photos, location or other apps. A picture leaves your phone only when you choose one for your blocks.
- App and device. The app tells our site that it is the app, which version it is and how it pays (for example "Android, store billing"), so the right payment screen opens. We do not collect advertising IDs, and the apps show no ads.
- Payments in the app. In some versions of the app you pay through Google Play or the Apple App Store. Then Google or Apple processes the payment under its own privacy policy, and we receive only a purchase reference, the product and the result, never your card or account details. In the other versions the payment opens in your phone's browser and Razorpay processes it, as on the website.
- Deleting your account. You can ask us to delete your account at any time from the app or at pixeltrees.in/account/delete. We delete it within 30 days, except the records the law requires us to keep (see "How long we keep it").
Storage and processors
These companies process data for us: Cloudflare (hosting, storage, picture checks and server logs), Razorpay (payments), Resend (sending email, United States) and Google (ads on /play only). Some of them store data outside India.
How long we keep it
- Orders and GST invoices: at least 8 years, as GST and income-tax law require.
- Your account and blocks: while you have an account. Ask us to delete it and we will, except what the law requires us to keep.
- Contest entries and the wall interest list: as described above.
- Server logs and error reports: only as long as needed for security and to fix problems.
Your rights
You can ask to access, correct, update or erase your personal data, withdraw a consent you gave (as easily as you gave it), and nominate someone to act for you if you cannot. Write to support@pixeltrees.in. We reply within 30 days. If you are not satisfied, contact our grievance officer, and you may complain to the Data Protection Board of India under the DPDP Act, 2023.
If something goes wrong
If a personal-data breach affects you, we tell you without delay: what happened, the likely effect, what we have done, and whom to contact. We also report it to the Data Protection Board as the law requires.