Pixel Prompt · Privacy Policy
Privacy Policy
Draft, for counsel · every section · bracketed items are still to be confirmed · not legal advice
Effective date: [DATE]Controller: Hermiz Lc, Peoria, Arizona · [MAILING ADDRESS] · support@hermiz.llc
Every section below is a draft, for counsel. Nothing here is final until counsel has read it; this is not legal advice.
The short version · draft, for counsel
The Kit runs on your computer. It sends nothing to us on its own: no telemetry, no usage data, no keys, no ledgers, no licence check. The one request it can make to us is the version file, only when you click Check for updates, and it carries nothing but the app's name and version. The only personal data we hold is what it takes to sell you a licence and answer your email: your name, email, billing details held by our payment processor, and the messages you send us. The app contacts other computers for five reasons only: prices for the desks, the brain you chose, a citizen's web searches and the pages they find, a page you click to open, and the releases page's version line when you click Check for updates. Every address is listed in Section 2.
1. What we collect · draft, for counsel
| Category | What | Source | Why (legal basis) |
|---|---|---|---|
| Purchase | name, email, licence and any yearly updates renewal, dates | you, at checkout | to provide the licence (contract) |
| Payment | last four digits of card, billing address, transaction history | Paddle, the merchant of record and payment platform; we never see full card numbers | billing (contract), tax and accounting (legal obligation) |
| Licence | the name the licence carries | you, at checkout | to issue the signed licence file (contract) |
| Support | emails and messages you send us, and our replies | you | to help you (contract; legitimate interest) |
| Community | your Discord/X handle and what you post in our spaces | you | operating the community (legitimate interest) |
| Website | standard server logs (IP address, browser, pages, timestamps) | your browser | security and site operation (legitimate interest) |
What the Kit itself collects: nothing. The software contains no analytics, no crash reporting, no licence "phone-home", and no network call to Hermiz except Check for updates, on the click only (Section 2). Like any visit to our website, that request is seen in our host's standard server logs (Section 1, Website). The engine is delivered as Python source, and Help's Network chapter lists every address it contacts; the list is in Section 2.
We do not collect your API keys, your Town's ledgers or books, your AI prompts or outputs, your trading configuration, or anything about your Town's activity. If you choose to share a screenshot or a log with us for support, we use it only to help you and delete it when the issue is closed unless you ask us to keep it.
2. Every address the app contacts · draft, for counsel
This is the list in the app's Help → Network ("What the app talks to"). The app contacts other computers for five reasons only: prices for the desks, the brain you chose, a citizen's web searches and the pages they find, a page you click to open, and the releases page's version line when you click Check for updates. The list was checked, not assumed: on 2026-10-01 a founded town was run behind a logging proxy (the founding, a turn on every brain kind, a citizen's web search, a paper from a citizen outside, a round, Ask the manager and Check for updates), and every host it contacted was on this list; none was off it (115 connections, 16 hosts). Nothing is contacted at start-up, on a timer, or when the town goes to sleep; the town folder (the charter, the ledgers, the books, the keys file, the access file, the licence) never leaves the machine.
On your own machine. The town answers on 127.0.0.1, port 8080 or the next nine. Every write needs the town's access file.
Price feeds, when a desk's turn runs (what travels: the symbols the desk watches):
- api.coinbase.com (crypto spot prices, no key)
- query2.finance.yahoo.com (stock prices, no key)
- stooq.com (daily stock prices when Yahoo answers nothing, no key)
- data.alpaca.markets (only with your own Alpaca key)
Brains, only the one a citizen was given and only when it thinks (what travels: that citizen's prompt, with your key in that request's header, to that host and nowhere else):
- api.anthropic.com (Claude)
- api.openai.com (OpenAI)
- generativelanguage.googleapis.com (Gemini)
- api.x.ai (Grok)
- api.meta.ai (Muse)
- Azure, at the endpoint you typed
- Ollama at 127.0.0.1:11434 and LM Studio at 127.0.0.1:1234 (your own computer; nothing leaves the machine)
- under More…: openrouter.ai, api.groq.com, api.mistral.ai, api.deepseek.com, api.together.xyz, api.fireworks.ai, api.perplexity.ai, or the endpoint you typed for a custom brain
A citizen's web searches: html.duckduckgo.com (the plain-HTML results, with the job's topics as the words searched), and the pages those results list. The claude and codex commands search with their own tools. Nothing of your town goes with a search.
Pages you open by clicking, in your own browser, never on their own: a brain provider's key page (console.anthropic.com, platform.openai.com, aistudio.google.com, console.x.ai, dev.meta.ai, ai.azure.com, ollama.com, openrouter.ai, console.groq.com, console.mistral.ai, platform.deepseek.com, api.together.xyz, fireworks.ai, www.perplexity.ai, lmstudio.ai), and our own pages from About (this site, releases, terms, privacy, the licence page).
Check for updates, only when you click it: hermiz.llc. Settings → About → Support → Check for updates asks for one small file, hermiz.llc/pixel-prompt/releases/version.txt, and compares the version in it with the app's own. What travels: the product's name and version in the request's User-Agent ("PixelPrompt/<version> (update check)"), nothing else. Never at start-up, on a timer or by the town's clock.
Only if you set it up: discord.com, when you give the town a Discord bot token and channel, to post the manager's round.
The installer, once: on a Windows computer without Microsoft's WebView2 runtime, the installer downloads it from Microsoft. The app never checks for updates by itself; a new version is downloaded by you, from the releases page, in your browser. The window is Microsoft's WebView2, a part of Windows; what that component contacts on its own is Microsoft's.
3. How we use it · draft, for counsel
To provide and bill the licence and any yearly updates renewal; to send service messages (receipts, renewal notices if you chose a renewal, security notices, material changes to terms); to respond to support; to run the community; to secure the website; to comply with law. We send marketing email only with your consent, and every such email has an unsubscribe link.
We do not sell personal data, and we do not share it with third parties for their own marketing. We do not use your data to train AI models.
4. Who we share it with · draft, for counsel
Service providers who process data on our behalf under contract: our merchant of record and payment platform (Paddle), which runs the checkout on hermiz.llc, takes the payment and issues the receipt; our email provider ([Google Workspace]); our community platform ([Discord]); and our website host ([Vercel] for hermiz.llc). Each has its own privacy policy. We share data with authorities only when legally required, and we will tell you when the law allows.
5. International transfers · draft, for counsel
We are in the United States. If you are elsewhere, your data is processed here. Where required, transfers rely on standard contractual clauses or an equivalent mechanism provided by our processors.
6. Retention · draft, for counsel
Purchase and billing records: [7] years after purchase, for tax and accounting obligations. Support messages: [2] years after the issue is closed. Server logs: [30–90] days. Community posts: until you delete them or the community closes.
7. Your rights · draft, for counsel
Depending on where you live (including the EU/UK under GDPR and California under the CCPA/CPRA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, to withdraw consent, and to not be discriminated against for exercising these rights. Email support@hermiz.llc; we respond within 30 days (45 for CCPA requests). You may also complain to your local supervisory authority. We do not "sell" or "share" personal data as those terms are defined under the CPRA, and we honor Global Privacy Control signals where applicable.
8. Security · draft, for counsel
Access to customer data is limited to the owner and processors listed above, protected by strong authentication. The Kit's design keeps your keys and your Town on your machine, which is the single most effective control we can offer: there is nothing of yours on our side to breach. If we ever suffer a breach affecting your data, we will notify you without undue delay and as required by law.
9. Children · draft, for counsel
The Service is for adults (18+). We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.
10. Cookies · draft, for counsel
The checkout on hermiz.llc is Paddle's. Paddle's script loads only when you press Buy or open a Paddle payment link, and it then sets the strictly necessary cookies it needs to complete a purchase, under Paddle's privacy policy. This site sets no cookies of its own; the Motion switch in the footer is remembered in your browser's local storage and nowhere else. [If analytics cookies are used, name them and offer a choice.] We do not use advertising cookies. The Kit uses no cookies of ours.
11. Changes · draft, for counsel
We will post changes here with a new effective date and, for material changes, notify customers by email at least 14 days before they take effect.
12. Contact · draft, for counsel
Hermiz Lc, Peoria, Arizona · [MAILING ADDRESS] · support@hermiz.llc