Privacy Policy

PixlPack is a mobile app that connects to your YouTube, Instagram, TikTok, and Facebook accounts to track your follower and subscriber counts in one place. This policy explains what data we collect through the app and the pixlpack.com website, and how it's used.

When you create a PixlPack account, we store your email address and a securely hashed version of your password (PBKDF2 with a per-user salt — we never store your password itself, and cannot recover it).

When you connect a platform (YouTube, Instagram, Facebook, or TikTok), we request read-only access via that platform's official sign-in flow. We do not receive or store your platform password.

The access token that platform issues is encrypted (AES-256-GCM) before it's stored, and used only to fetch your public follower/subscriber count, following count, and post count directly from that platform's own API — once daily, plus once immediately when you connect. We never post, follow, message, or change anything on your connected accounts; access is read-only.

You can connect more than one account per platform. You can disconnect any account at any time from within the app, and separately revoke PixlPack's access from the platform's own settings (e.g. Google Account permissions, Meta Business settings, TikTok app permissions).

Each time we check a connected account, we store a single data point: the date and the follower/subscriber count at that time. This is what powers your growth charts and trends. We don't store anything about who your followers are — only the count.

PixlPack lets you optionally enable a public profile page at a handle you choose (pixlpack.com/{yourhandle}). If you turn this on, that page shows links to your connected platform accounts. It's off by default, and you can disable it at any time in the app's settings — the page stops being publicly accessible immediately.

If you allow notifications, we store a device push token so we can notify you about follower milestones or unusual growth. You can disable this in your device settings at any time.

We don't sell your data. We don't share it with advertisers or data brokers. We don't use third-party analytics or ad-tracking SDKs in the app. The only outside services we talk to are the platform APIs you explicitly connect (to read your own follower counts) and the infrastructure that runs PixlPack itself (Cloudflare, for hosting and our database).

You can delete your account and all associated data at any time by contacting us at the email below. This removes your account, connected-platform tokens, and follower history permanently.

If this policy changes in a material way, we'll update the date at the top of this page.

Questions about this policy or your data: camdendillon@gmail.com