Pixel Agent DepartmentPrivacy Policy
Last updated: November 9, 2026
This policy explains what data Pixel Agent Department (the "App": the Windows game, its local engine and our server) accesses, why, where it is stored and how you can delete it. The App is made by GetComponent Studio ("we"). Contact: getcomponentstudio@gmail.com.
1. Summary
- Your videos go directly from your PC to Instagram, TikTok or YouTube. They never pass through our server.
- Your access tokens are stored encrypted on your PC (Windows DPAPI). Our server only relays them once during sign-in and deletes them.
- Our server keeps an anonymous installation ID, your plan, AI usage counters and the name/ID of the accounts you connected.
- We do not sell data, show ads, use tracking cookies or analytics, or share data between users.
- Nothing is published or replied to without your approval in the App.
2. Data we access from each network
We only access a network after you sign in on its official page and grant permission. We use only the official APIs and only for the features listed here.
| Network | Permission | What we access | What it is used for |
|---|---|---|---|
| YouTube (YouTube API Services) | youtube.readonly | Your channel name and ID, subscriber count, your uploaded videos and their views, likes and comments counts | Show the connected channel and the stats of your videos in the YouTube office |
youtube.upload | Uploading videos you approved, with title, description, visibility and date | Publish your Shorts | |
| Instagram (professional account) | instagram_basic | Username, profile picture, followers, your media with likes and comments counts | Show the account and the stats of your Reels in the Instagram office |
instagram_content_publish | Publishing Reels you approved | Publish your Reels | |
instagram_manage_comments | Comments on your media (text, username, time); posting replies | Show new comments and post the replies you approve | |
instagram_manage_messages | Sending one private reply to a person who commented | Send the private replies you approve | |
| TikTok | user.info.basic, user.info.profile | Open ID, display name, username, avatar, profile link | Show which account is connected |
user.info.stats | Followers, likes and video counts | Show account stats in the TikTok office | |
video.list | Your public videos with views, likes, comments and shares counts | Show the stats of what you published | |
video.upload, video.publish | Uploading and posting videos you approved, with caption and privacy settings | Publish your TikTok videos |
3. Where data is stored
On your PC
Access and refresh tokens, connected account info, your job queue (titles, captions, dates, links and status of your posts) and the stats shown in the offices are stored in %LOCALAPPDATA%\PixelAgentDepartment. Tokens are encrypted with Windows DPAPI, so only your Windows user on that PC can read them. Your video files stay where you keep them.
On our server (Google Firebase, United States)
- Installation record: an anonymous ID (no name, email or password), the engine version, the Windows version, first and last start and number of starts, your plan and subscription end date.
- Connected accounts: for Instagram, the IDs and usernames of the accounts you shared; for TikTok, your open ID and username; and the connection date. Never tokens.
- AI usage: monthly counters (number of requests, tokens and cost), to apply your plan's limits.
- Sign-in relay: when you sign in to Instagram or TikTok, our server exchanges the authorization code (this needs the App secret, which only lives on the server) and keeps the result until your App collects it. It is deleted when collected; if it is not collected, it can no longer be used after 15 minutes and is deleted automatically within 24 hours.
- TikTok token renewal: your App sends the refresh token to our server, which renews it with TikTok and returns the new tokens without storing them.
- Technical logs (Google Cloud Logging): request time, anonymous ID, errors. They do not contain tokens or your texts. Google keeps them for 30 days.
4. AI-written captions
If your plan includes AI captions, the information you type about a clip (title, topic, tone, language and target networks) is sent through our server to Anthropic (Claude API) to write the captions. The video is not sent. We do not store the texts on our server. Anthropic processes them under its commercial terms. You always review and can edit the captions before anything is published.
5. Service providers
- Google Firebase / Google Cloud (server, database, logs): Google Privacy Policy.
- Anthropic (AI captions): Anthropic Privacy Policy.
- Meta / Instagram, TikTok and Google / YouTube receive what you publish through their APIs, under their own policies.
6. YouTube and Google user data
The App uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google's processing is covered by the Google Privacy Policy. You can revoke the App's access at any time from your Google Account permissions page.
Pixel Agent Department's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use YouTube data for advertising, do not sell it, do not let humans read it (except with your consent for support, for security, or to comply with the law), and do not use it to train AI models.
7. How long we keep data
- On your PC: until you disconnect the account (the token is deleted) or delete the App's folder.
- Stats shown in the offices are fetched again from each network when you open them.
- On our server: the installation record and usage counters while you use the App; we delete them on request (see Data deletion).
8. Your choices and rights
You can disconnect any network in the App (Accounts → Disconnect) and revoke access on the network itself:
- Google / YouTube: myaccount.google.com/permissions
- Instagram: Instagram app → Settings → Website permissions → Apps and websites → remove "Pixel Agent Department"
- TikTok: TikTok app → Settings and privacy → Security & permissions → Apps and services → remove "Pixel Agent Department"
You can ask us to access, correct or delete the data on our server by writing to getcomponentstudio@gmail.com. Instructions: Data deletion.
9. Security
Connections use HTTPS. Tokens are encrypted on your PC. Our database and storage are closed to the public (only our server functions can access them), and app secrets are kept in Google Secret Manager.
10. Children
The App is not directed to children under 13, and Instagram, TikTok and YouTube have their own minimum ages. Do not connect accounts that you are not allowed to manage.
11. Changes
If this policy changes, we will update this page and its date. Important changes will also be announced in the App.
12. Contact
GetComponent Studio, the Dominican Republic. Email: getcomponentstudio@gmail.com.