Privacy
Last updated 23 September 2026.
One Pixel is a daily guessing game played through Steam. This page says what the game and its server know about you, why, for how long, and how to have it deleted. The short version: the server knows your Steam account number and the pixels you guessed, and nothing else about you.
Who is responsible
The controller of your data is Andrzej Chmiel, who makes the game and runs its server. Write to andret2344@gmail.com about anything on this page.
What is collected, and why
| What | Why | Legal basis | How long |
|---|---|---|---|
| Your SteamID, the number of your Steam account. The game gets it from Steam when you start playing; you never type it. | To know which guesses are yours, and that you have not guessed today already. | Performing the game you asked to play (GDPR art. 6(1)(b)). | As long as your guesses are kept. |
| Each guess: the day, the pixel, and when it was made. | The game itself: one guess a day, the archive of your past days, your totals and your streak. | Performing the game (art. 6(1)(b)). | Until you delete them, in the game or by asking. Your archive and your streak are made of them, so they are not deleted on a timer. |
| When a request fails in a way the server did not expect, or Steam refuses to confirm who you are: your IP address, your SteamID if known, what was requested, your game's user agent string and the time. When you have deleted your data and Steam does not confirm that it has been cleared there too: your SteamID and the time, so that it can be finished by hand. | To find and fix the fault. The game tells you when this happens. | Keeping the service working (legitimate interest, art. 6(1)(f)). | 14 days, then deleted automatically. |
| Your IP address, when your game signs in. | To limit how often one address can sign in, so nobody can exhaust the game's allowance with Steam. | Protecting the service from abuse (art. 6(1)(f)). | About an hour, in memory. |
| The web server's access log: IP address, time, the address requested and the user agent, for every request to this server including this page. | Operating and securing the server, including looking into abuse that is only noticed some days later. | Legitimate interest (art. 6(1)(f)). | 30 days, then deleted automatically. |
There is no account to create, no e-mail address, no name, no payment detail, no advertising and no tracking. This website sets no cookie of its own.
The Steam widget on the game's page
The game's page shows the game's entry from the Steam store, in a frame that your browser loads straight from Valve's servers. Opening that page therefore sends Valve your IP address and your browser's details, and Valve sets its own session cookie there, which Steam uses to protect its forms rather than to track you; browsers that block third-party cookies do not keep it. The basis for embedding it is the legitimate interest in showing the game's store listing where people read about the game (art. 6(1)(f)). What Valve does with the request is covered by Valve's privacy policy; this server never sees it. This page, the privacy policy, embeds nothing.
On your computer
The game keeps a few settings in a file, settings.json — whether the sound is on, whether you have seen the introduction, and whether the guides are shown — which Steam Cloud copies between your computers. It keeps the window size and its current sign-in with the server in the Windows registry. None of this is sent to the server, except the sign-in, which is how the server knows it is you.
Who else receives it
- Valve Corporation, which runs Steam, in the United States. The server asks Steam to confirm who you are each time you sign in, and sends Steam your totals, your streak and the achievements they earn, so they appear on your Steam profile. Your browser also contacts Valve when you open the game's page, as described above. What Valve does with that is covered by Valve's privacy policy. The transfer to the United States relies on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, under which Valve is certified.
- The provider of the virtual server the game's server runs on, whose hardware stores the data above. The server is administered by the controller alone; the provider does not operate it.
Nothing is sold, and no other player can see your guesses.
Your rights
You can delete your data yourself, in the game: open your statistics, choose DELETE MY DATA and hold the button for three seconds. It works before you make the day's guess and not after it, because deleting a guess you have just made would give you a second one; the next day, before you guess, it works again.
You can also ask for a copy of your data, for it to be corrected or deleted, for its processing to be restricted, to receive it in a machine-readable form, and you can object to the processing based on legitimate interest. Write to andret2344@gmail.com with your SteamID. So that nobody can delete someone else's history, you will be asked to prove the account is yours, usually by putting a short code in your Steam profile for a few minutes. You will get an answer within a month.
Deleting your data, either way, removes every guess you made, and with them your archive, your totals and your streak. It cannot be undone. The server then tells Steam as well: your totals and your streak there are set to zero, and the game's achievements on your Steam profile are locked again and lose their unlock dates. Two things stay with Valve, out of the server's reach: the entries your unlocks already made in your Steam activity feed, and the share of all players holding each achievement, which Valve computes itself.
You can also complain to a data protection authority — in Poland the President of the Personal Data Protection Office (UODO), or the authority where you live.
What you do not have to give
The game cannot be played without a Steam account, because your SteamID is what makes one guess a day yours. Nothing else is asked for. No decision about you is made automatically, and no profile of you is built.
Changes
If what the game collects changes, this page changes first, and the date at the top says when.