Account and Data Deletion

1. Account deletion paths

• An in-app Profile action that explains the scope and requires final confirmation
• Server-side authorization and scope enforcement so an authenticated user can delete only their own account
• This public page remains accessible without the app and lets Google and other users without an Apple-linked identity authenticate before requesting deletion.
• An Apple-linked account must reauthenticate in the ONEPIX iOS app with a fresh Apple authorization code. The web does not execute its deletion, and the server hard-deletes Auth and ONEPIX data only after successful upstream revocation or verification of a valid revocation receipt.

2. Information deleted

Once account deletion is approved, the following information is deleted or disconnected from public activity on the server.

• The Apple or Google sign-in account, ONEPIX profile, pixel balances, acorn wallet and inventory, internal PIXEL+ state, and active sign-in sessions. Unused acorns and item entitlements are permanently removed and cannot be transferred or restored to a new account.
• Current pixels and signatures maintained by the account on active canvases
• Post and comment text and author personal information, including nickname and country snapshots; only a structural tombstone remains in the thread
• A non-identifying Apple-revocation operational outcome is retained for 30 days. Any record that must be held longer for law or security will be limited to that purpose and disclosed as required.

3. Information retained in archives

Archives retain pixel colors and coordinates as a record of the finished collective work. Nickname, country, signature, account identifier, and account link are irreversibly anonymized, and the contributor is displayed as ‘Deleted User.’ ONEPIX will not use the anonymized record to restore or relink the former account.

• A nickname change alone preserves historical snapshots, but the anonymization rule above takes priority when the account is deleted.
• Archive colors and coordinates may still be modified or removed when required for legal, privacy, safety, or rights-enforcement reasons.

4. Purchases, subscription cancellation, completion, and returning later

Deleting a ONEPIX account and canceling PIXEL+ are separate actions. Account deletion does not cancel the App Store or Google Play subscription; cancel it in the store’s subscription settings before deleting the account. Deletion removes the ONEPIX acorn wallet, inventory, and internal subscription state, while limited non-identifying billing evidence may remain as described in the Privacy Policy.

Completed account deletion cannot be undone. A later new registration does not restore or relink the deleted account, unused acorns, item entitlements, subscription history, or anonymized archive record. Completed consumable acorn packs cannot be restored.