Account and Data Deletion

1. Account deletion paths

• An in-app Profile action that explains the scope and requires final confirmation
• Server-side authorization and scope enforcement so an authenticated user can delete only their own account
• This public page remains accessible without the app and lets Google and other users without an Apple-linked identity authenticate before requesting deletion.
• An Apple-linked account must reauthenticate in the ONEPIX iOS app with a fresh Apple authorization code. The web does not execute its deletion, and the server hard-deletes Auth and ONEPIX data only after successful upstream revocation or verification of a valid revocation receipt.

2. Information deleted

Once account deletion is approved, the following information is deleted or disconnected from public activity on the server.

• The Apple or Google sign-in account, ONEPIX profile, pixel balances, and active sign-in sessions
• Current pixels and signatures maintained by the account on active canvases
• Post and comment text and author personal information, including nickname and country snapshots; only a structural tombstone remains in the thread
• A non-identifying Apple-revocation operational outcome is retained for 30 days. Any record that must be held longer for law or security will be limited to that purpose and disclosed as required.

3. Information retained in archives

Archives retain pixel colors and coordinates as a record of the finished collective work. Nickname, country, signature, account identifier, and account link are irreversibly anonymized, and the contributor is displayed as ‘Deleted User.’ ONEPIX will not use the anonymized record to restore or relink the former account.

• A nickname change alone preserves historical snapshots, but the anonymization rule above takes priority when the account is deleted.
• Archive colors and coordinates may still be modified or removed when required for legal, privacy, safety, or rights-enforcement reasons.

4. Subscription, completion, and returning later

Version 1 has no PIXEL+ store subscription. If store billing is introduced later, account deletion and store-subscription cancellation will be separate actions, and the subscription must be canceled with Apple or Google.

Completed account deletion cannot be undone. A later new registration does not restore or relink the deleted account or its anonymized archive record.