Privacy

Piksi is a pairwise comparison ranking app. You sign in, create decks of items, and answer 'this or that' questions; Glicko-2 builds the ranking. We do not use third-party analytics or trackers.

Sign-in identity is managed by Lotl Auth. Decks, cards, comparison history, and ratings live on our server. Telemetry goes to Lotl Observe. The harness/simulator (developer-only, not user-facing) fetches public Pokemon data from pokeapi.co for parameter tuning.

What we collect

We collect and store the following kinds of data, each with its own retention and legal basis:

Account — Your sign-in identity is managed by Lotl Auth, our authentication service (auth.lotlsoft.com). Lotl Auth stores your email, your name if you provided one, and a hash of your password (argon2id). Sign-in issues a short-lived JWT access token (15 minutes) and a refresh token (30 days). Email verification and password resets go through transactional email (Resend).Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service). Removable when you delete your account. Shared with: Lotl Auth.
Decks and cards — Decks you create, the cards inside each deck (titles, optional images and tags), and any per-card notes. Stored against your account.Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service). Removable when you delete your account.
Comparisons and ratings — Each pairwise comparison you record (which card you picked, when), and the resulting Glicko-2 ratings, rating deviations, and volatilities for each card. The history is replayed on undo.Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service). Removable when you delete your account.
Shared deck tokens — When you share a deck publicly, we mint a share token that resolves to a read-only view of the deck and its ratings. Anyone with the link can read; nothing about visitors is recorded.Stored on our server. Kept until you delete it. Legal basis: contract (needed to run the service). Removable when you delete your account.
Usage telemetry — Page views, click events, and crash reports sent to Lotl Observe so we can see what works and what breaks. Does not include the contents of your decks, cards, or comparison choices.Stored on our server. Kept permanently. Legal basis: legitimate interests. Not individually deletable. Shared with: Lotl Observe.

Third parties

These external services receive some of your data:

DigitalOcean — server hosting for the Piksi service

Your rights

You can export everything we hold about you, and delete your account at any time. Both options live in your account settings. Deletion is immediate and unrecoverable.

Last updated: 2026-05-27.