Pixady

Privacy policy

Last updated 30 September 2026

Pixady (pixady.com) is run by Vive Hosting Ltd, the data controller for the personal data described here. Questions or requests: support@pixady.com.

What we collect

  • Your account. If you sign in with Google, we receive your name, email address, profile picture and Google account id (the openid, email and profile permissions, nothing else). With GitHub, your username, name, email addresses, profile picture and account id (read:user, user:email). With email, your address and a password, which we only ever store as a secure one-way hash.
  • Your profile. The username, display name and avatar you choose, optional handles for other platforms, and your time zone.
  • What you do on Pixady. Slots you book and the pitch you send with a booking (seen only by you and our moderators), when you went live, co-hosting, missed slots, your chat messages, reports you make, and how long you watch each stage.
  • On stage. When you are live, your video and audio are streamed to viewers, recorded, and your speech is transcribed.
  • Tips. If you tip a host or are tipped: the amount, the date, who it was from and to, and any message sent with it. Card details are entered with and held by Stripe: we never see or store your card number, only the card type and its last four digits. Hosts who take tips give their identity and bank details to Stripe, not to us.
  • Device and visit data, for everyone including visitors without an account: IP address, browser type (user agent), an anonymous browser id kept in a cookie, number of visits and watch time.
  • Usage analytics. Pages visited, where you came from, device, browser, approximate location (country) and steps such as signing up. When you are signed in these are linked to your account number, never your name or email.

How we use it

  • To run Pixady: sign you in, keep the schedule, put you on stage, show your chat and profile.
  • To take tips and pay them to hosts, prevent fraud, and keep the financial records the law requires.
  • To keep it safe: moderators review recordings, transcripts, chat and reports, and word filters check names, pitches and chat. Live streams are also checked automatically: stills from the stream and what is said on stage are sent to an AI service, regularly and whenever someone reports a stream, to spot likely rule breaks. A stream it flags, or one that enough viewers report, is paused until a moderator looks at it. This can lead to a booking being declined, a stream paused or ended, camera access being withdrawn or an account suspended.
  • To email you: sign-in and password links, letting you in from the waiting list, booking updates, and occasional news about Pixady such as launch dates. Every news email has an unsubscribe link.
  • To prevent abuse and keep the service secure (IP addresses, rate limits and a human-verification check on some forms).
  • To understand how Pixady is used and improve it (the analytics above).
  • For AI-assisted features: speech on stage is transcribed automatically on our own servers (it isn't sent to anyone else to do this), and transcripts, chat messages and booking pitches are processed by an AI service for AI-assisted features such as automated chat participation.

We don’t sell your data, don’t show advertising and don’t use your data for anyone else’s marketing.

Google user data

If you sign in with Google, we use the name, email address and profile picture Google shares only to create and sign in to your account, show your profile, and email you about Pixady. We don’t use it for advertising, don’t sell it, don’t use it to train AI models, and only share it with the service providers listed below where they need it to run Pixady. Pixady’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Pixady’s access at any time from your Google Account’s security settings, and ask us to delete your account (below).

Legal bases

Under UK GDPR we rely on contract to provide the account and the service you asked for; on legitimate interests for safety and moderation, security, analytics, improving Pixady and sending news about it (you can object or unsubscribe at any time); and on legal obligation where the law requires us to keep or disclose data, including records of tips.

Who we share it with

Our servers, database, email, mailing list, streaming and analytics run on infrastructure we operate ourselves. We also use these providers, each only for the job described:

  • Cloudflare: carries all traffic to pixady.com, protects the site from attacks, and runs the human-verification check on sign-in and report forms.
  • DigitalOcean (London): stores session recordings and thumbnails privately, and serves the live video to viewers without an account (those short video segments are deleted within minutes).
  • Anthropic: receives stream transcripts, chat messages and booking pitches for the AI-assisted features above, and stills from live streams with what was said on stage for the automatic safety checks.
  • Stripe: only if you tip or take tips. It processes the payment and pays hosts, and receives the tipper’s payment details and, for hosts, identity and bank details. Stripe also uses this data as a controller in its own right, under its privacy policy.
  • Google and GitHub: only if you choose to sign in with them.
  • Google Fonts: your browser downloads the site’s typeface from Google, which sees your IP address.

Other people see what you make public: your username, display name, avatar and other-platform handles, your chat messages, and anything you broadcast. Your email address is never shown. We may disclose data where the law requires it, or to protect people’s safety.

International transfers

Some of these providers (Cloudflare, Anthropic, Stripe, Google, GitHub) may process data outside the UK, mainly in the United States. Where they do, the transfer is covered by the safeguards UK law requires, such as the UK–US data bridge or the UK International Data Transfer Addendum to standard contractual clauses.

How long we keep it

  • Session recordings and thumbnails: 90 days, then deleted.
  • Transcripts: 90 days, then deleted.
  • IP addresses: 90 days, then removed from our records.
  • Sign-in links: a password link works for an hour, a welcome link for seven days.
  • Your account, profile, bookings, chat and watch history: while your account exists. When you ask us to delete your account we remove your profile and bookings and anonymise your chat messages.
  • Records of tips: six years after the end of the financial year they belong to, as tax and accounting law requires, even if you delete your account (your name is removed from them).
  • Moderation records (reports, strikes, bans, automatic check results, the audit log): kept while Pixady runs, to handle repeat abuse, with IP addresses removed after 90 days.
  • Server logs: kept briefly and overwritten as they fill up.

Cookies and storage

We use only cookies the site needs to work, and no advertising or tracking cookies:

  • ls_session: keeps you signed in (30 days).
  • ls_guest: an anonymous id for your browser, so we can count viewers and link a visit to the account you create (one year).
  • ls_oauth_state: protects the Google and GitHub sign-in step (ten minutes).

Your browser also remembers a few settings locally (whether your camera and microphone were on, and whether the “Up next” panel is open). Our analytics (Umami, which we run ourselves) sets no cookies. Cloudflare’s human-verification check may set its own cookie when it runs.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Email support@pixady.com from the address on your account and we’ll reply within one month. If you’re unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

You must be 18 or over to create an account, book a slot or appear on camera. Pixady isn’t aimed at children; if we learn that an account belongs to someone under 18 we’ll close it and delete its data.

Security

All traffic is encrypted, passwords are stored only as one-way hashes, recordings are private and only viewable by our moderators through short-lived links, and access to personal data is limited to the people who run Pixady.

Changes

We’ll update this page when what we do changes, and change the date at the top. If a change matters, we’ll email you before it takes effect.