Last updated August 13, 2026
This is a small project run by one person. We collect as little as we can, and this page says exactly what that is.
We never see your card numbers; Stripe handles payment entirely. We use no tracking cookies and no analytics. Your Game of Life simulation lives in your browser's localStorage and never reaches our servers. We do not sell or share your personal information, and we run no ads.
We keep your email so we can tell you when one of your pixels is bought by someone else. Those notifications are not switched on yet, so for now we hold the address for that purpose rather than use it. Your display name appears on the board, and in the ownership record of the pixels you have owned, which we publish. Ask us and your name comes off that record (see Retention); the price, the date and the pixels stay. Your prompts are used to generate the art you ask for and to moderate it. The reporting and blocking data is used only to run the moderation system: reviewing reports and enforcing blocks against abusive buyers.
Where EU or UK law applies, our legal bases are performance of our contract with you (your purchase, your names, the art you generate, and the outbid notice) and our legitimate interest in keeping the board free of abuse (server logs, reporting, and blocking).
We use Stripe for payments, SendGrid for email, Amazon Web Services (AWS) to generate AI images and to moderate images, whether you generated them or drew them yourself, and Anthropic to moderate AI prompts. All of them process data in the United States, under their own published privacy and security programs (Stripe, SendGrid, AWS, Anthropic). Where this involves personal data from the EU or UK, those transfers rely on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. This is also our overseas-transfer notice under Japan's APPI. Outbid emails are sent through SendGrid once we switch them on; if you unsubscribe, that choice is stored at SendGrid (we hold no opt-out list of our own) and stays in effect until you opt back in.
While you own a pixel, we keep your email so we can tell you if you are outbid. We do not simply erase it the moment you are outbid: we also keep it as part of each pixel's restorable history. If content on the board is taken down for breaking our rules, that history lets us restore the affected pixels to their rightful earlier owner and reach them, so a legitimate owner is not punished for someone else's abuse. This is a deliberate choice to keep your email a little longer than strict minimization would, for your own protection. If we switch on a digest cap for outbid emails, we also keep your email briefly so we don't send you several outbid notices at once.
The ownership record is permanent by design (the history behind it is append-only). What we publish from it is the display name, the price paid, the date, which pixels the purchase covered and the colors put on them. The page for each purchase also says how many of its pixels were placed for the first time and how many were taken over from an earlier owner. The pixels from one checkout appear on a single page, so anyone can see they were bought together. If we take content down for breaking our rules, we stop publishing what we took down. A purchase taken down in full no longer has a page; where we took down only some of its pixels, the rest stays published, still under your display name and at the same link. We can also stop publishing a purchase on its own, without taking its pixels down: the record of it goes, and the pixels you still own keep rendering on the board under your display name. We still hold those rows; we just stop showing them. You can ask us to anonymize your display name in the record (see below), and the price, the date and the pixels stay. The stored row behind each purchase also holds your email and the payment identifiers Stripe gives us, kept for the restoration described above and never published. The record of an anonymization request is kept for as long as the site runs: deleting it would delete both the proof that we acted and the flag that keeps your name off a later purchase. Server logs are automatically rotated and deleted; we keep them only as long as we need them to spot and stop abuse.
You can unsubscribe from outbid emails using the link in any such email. To have a display name removed or anonymized, email us at support@lifeonboard.io. When we anonymize a name, the page for each purchase it appears on moves to a new address, so an old link to that page stops working.
You can also ask us to access, correct, delete, or export your personal data, or to restrict or object to how we use it. Email the same address and we will respond. If you are in the EU or UK and believe we have mishandled your data, you can also complain to your local data protection authority.
lifeonboard.io is operated by bivio (Andrea Belvedere) in Tokyo, Japan. Full operator details are on our 特定商取引法 page.
Questions about privacy: support@lifeonboard.io.