Privacy Policy
PixelForge — Windows desktop software
Effective date: October 7, 2026
Contact: clin70018@gmail.com
The short version
We do not collect your data, because we operate no servers.
Your API key and your artwork stay on your own computer. The only time anything
leaves your machine is when you start an AI task: your text instruction, any
reference image you attached, and a snapshot of your canvas are sent directly
from your computer to the AI provider you configured.
1. What we do not collect
- No account system. You do not sign up for anything.
- No telemetry, no crash reports, no usage statistics.
- No device fingerprints, no IP address logging, no location data.
- We never receive your artwork, your instructions, your API key or any of your files.
- The software contains no code that reports data back to us or to any third party.
2. What is stored on your own computer
- AI provider address and model name: ai_config.json in the application folder.
Plain text. You can read and edit it yourself.
- API key: the same file, encrypted with Windows DPAPI. Only your Windows account
on this machine can decrypt it; copying the file to another computer will not
reveal it.
- Language and theme preference: Windows registry (QSettings). Only used to
remember your choices.
- Runtime log logs/ai.jsonl: application folder. Prompt text is not recorded by
default — only character counts and hashes, for troubleshooting.
- Your artwork: wherever you save it (.pforge project files and exported
PNG / GIF / APNG / sprite sheets).
All of the above stays on your machine. You can remove everything by deleting the
application folder and the registry key HKCU\Software\PixelForge.
3. The only data that leaves your computer
When you press Start and use the AI feature, the software sends the following
directly to the AI provider endpoint that you configured yourself:
- the text instruction you typed;
- the reference image, if you attached one;
- a snapshot of your current canvas (the model uses it to judge what has been
drawn so far, across multiple rounds).
The destination is the address you entered in the settings (for example your own
account with DeepSeek, OpenAI, Moonshot, Zhipu, Qwen, SiliconFlow, OpenRouter, or
a local model via Ollama / LM Studio). This traffic does not pass through us. We
have no server and no way to see it.
How that data is then handled is governed by your provider's privacy policy.
Please read the terms of the provider you choose. If you use a local model
(Ollama / LM Studio), the data does not leave your computer at all.
4. Content filtering runs locally
Before any request is sent, it passes through a built-in, offline content filter.
Requests that hit a blocked category are never sent — they do not leave your
computer.
5. Buying on Steam
If you purchase this software on Steam, the data generated by that purchase
(account, payment, download records) is handled by Valve under Valve's privacy
policy. We only receive sales settlement information (amounts and order counts)
and no personal information about you.
6. Children
This software is intended for users aged 13 and over. We do not knowingly collect
information from anyone, including children — we have no mechanism to collect it.
The built-in filter blocks requests for sexual content involving minors before
they are sent.
7. Your rights and how to delete your data
Because we do not hold your data, there is no "request an export / request
deletion from us" process:
- To remove your API key: clear it in the software settings, or delete ai_config.json.
- To remove your interface preferences: delete the registry key HKCU\Software\PixelForge.
- To remove logs: delete the logs folder in the application directory.
- To remove everything: uninstall the software and delete any remaining folder.
If you have already sent content to an AI provider and want it deleted, please
use that provider's own request process — that data exists only on their side.
8. Security
- API keys are encrypted using Windows DPAPI and are bound to your Windows account.
- Communication with AI providers uses HTTPS (except for local model addresses
such as http://localhost).
- The software includes anti-debugging and anti-tamper measures. Their purpose is
to protect the program itself from reverse engineering; they do not involve
your data.
No software can be guaranteed absolutely secure. Please consider this before
sending confidential material to a third-party model.
9. Changes to this policy
If we ever add a feature that collects data (for example cloud sync or usage
analytics), we will update this document and announce it in the software and on
the store page before enabling it. Continuing to use the software after a change
means you accept the updated policy.
10. Contact
For any privacy question:
- clin70018@gmail.com (primary)
- 1756026574@qq.com
- 17634187068@163.com
We will respond within a reasonable time.