Privacy policy

Last updated: 3 November 2026

Quarterturn ("we", "us") is an independent studio. This policy covers our Discord bots (Nudge, Spawner Sync, and any other bot we publish), our game Pixel Run, and this website. We keep it short and plain. We never sell your information.

Our Discord bots

What every bot stores. To work, a bot has to remember which server it is in and how that server set it up. That means Discord IDs (server, channel, role and user IDs), the settings a server owner chooses, and the records each bot's features create, listed below. We do not store your messages, except where a bot's section below says so, and we do not build profiles of people.

What the bots can see. Bots receive the slash commands, button presses and form entries that people use on them, and direct messages sent to them. They can list the members of a server that has installed them (the "Server Members" permission), so they can tell who is staff. Nudge does not read ordinary messages in your channels. Spawner Sync reads messages only inside its ticket channels, to keep the ticket's activity and transcript.

Nudge

• Server settings: the server ID, staff role IDs, log channel, the channel and schedule for automatic activity checks, and the strike and demotion settings.
• Staff records: for each staff member, their Discord user ID, how many checks they have passed or missed, their strikes, demotions, passing streak, when they were last active, and how quickly they confirmed each check.
• Exemptions: who is exempt from checks or captchas, until when, and the reason a server manager typed.
• What Nudge does with it: it posts activity checks, counts who responds, and, only if a server owner has turned it on, removes a staff role when someone reaches the strike limit. Server owners decide those rules. Nudge only carries them out.
• Server directory: when Nudge is added to a server, we record the server's name, member count and ID, and, if Nudge has the permission to create invites, we create and keep an invite link to that server, so we can offer help. Remove the bot and we delete these records (see "Keeping and deleting data").

Spawner Sync

• Server settings: the live price board channel, ticket categories and staff roles, ticket tiers, logging channels and other options a server chooses.
• Trading desk: tickets and their transcripts (including what people write in the ticket channel), quotes, trade steps, sales and vouch records, ratings, blacklist entries, and scam reports with the evidence links the reporter provides.
• Shared scammer list: when one of our staff adds an account to it (for example after a scam report), the Discord user ID and the reason are added to a list shared by every server that uses Spawner Sync, so that an account reported in one server can be spotted in the others. A person on the list can ask us to review it.
• Player lookups: a Minecraft username you ask about is sent to the DonutSMP API to fetch public stats. We keep recent snapshots of those public stats to show changes over time.
• Uploads: a schematic file you give /render or /schematic is read to draw or price it. It is held in memory for a short while so its buttons keep working, then discarded.
• Optional Premium: if a server buys Premium we keep a record of the plan, its dates and any discount code used.

Direct messages to a bot

If you send a bot a direct message, the text and any attachment links are passed to a private inbox in our support server so a person can reply. Please don't send passwords or anything sensitive. Some bots also send one short direct message to a server owner when they are added, and a short rating request to a customer when a ticket closes.

How we use it

Only to run the features described above, to give support, and to stop abuse. We don't show ads, we don't sell or rent your information, we don't use it to train AI models, and we don't use it for anything unrelated to the bot it came from.

Who else sees it

• Discord, because the bots run on it. Its own privacy policy applies to what you do on Discord.
• The server you are in. A server's managers can see the records their own bot keeps about their server, such as a staff board or ticket transcripts. That is the point of those features.
• Other servers using Spawner Sync, but only for the shared scammer list described above.
• DonutSMP, but only the Minecraft username in a player lookup.

We don't share information with anyone else, unless the law makes us.

Keeping and deleting data

• Nudge deletes everything it holds about a server (settings, staff records, exemptions, checks and the server directory entry) automatically when the bot is removed from that server.
• Our other bots keep a server's records so its setup survives if the bot is re-added. Ask us and we will delete a server's records within 30 days.
• Anyone can ask us to delete, correct or show them what we hold about their Discord account. Message us in our support server (linked below). We may need to confirm it is you.
• Short-lived backups may keep deleted data for up to 30 days before they are overwritten.

Security

Bot tokens and databases are kept on systems we control, and only we have access to them. No system is perfectly secure, so we can't promise that nothing will ever go wrong, but we fix problems as soon as we find them and will tell affected server owners about anything serious.

Pixel Run

Pixel Run does not ask for your name, email address or location. Your progress (your level, pixels, gems, trophies, the things you've unlocked, your settings, and your best daily and weekly runs) is saved on your own device. There is no shared leaderboard.

Signing in with a Quarterturn account (in Settings) is optional. If you do, the game keeps your sign-in on your device (pixel-run:qt: the sign-in tokens, your Quarterturn name, an ID for this device, and when the cloud save was last checked) and a fingerprint of the last save it sent (pixel-run:qt-synced), so it only sends a save when something changed. It sends your progress, the same things listed above, to your account as one cloud save, so you can carry on from another device. When this device and your account have different progress, the game asks which one to keep. Signing out in the game removes the sign-in from your device; the cloud save stays on your account until you delete it there. In the game you can make an account with a code we email you, or sign in with a one-time code from your account page. The game needs an internet connection to play, but we don't use that connection to collect personal information about you.

The first time the game opens it asks the year you were born, once. It uses the answer only to tell whether you are under 16, keeps only that ("under 16" or "16 or older") on your device, and forgets the year straight away. The year is never sent anywhere. Until the question is answered, the game treats the player as under 16.

If you choose to send a bug report, it includes what you typed, the game's version, your phone's model and Android version, and where in the game you were. It goes out through your phone's share sheet, only when you send it, and only to the person you choose to send it to.

We plan to add optional rewarded ads and in-game purchases. When we do:

• Ads are only ever shown when you choose to watch one for a reward, never in the middle of a run.
• For players under 16, ads are never personalised, come only from ad networks certified for children's apps, and are marked as being for a child, so the ad company may not build a profile of them.
• For players 16 or older, ads are personalised only if they say yes on a consent form first. The companies that provide them (for example Google) may then collect information such as your device's advertising ID, as described in their own privacy policies.
• Purchases will sit behind a check that a parent or guardian is there.

Before any of that goes into the game, we will update this page and say so in the game first.

We may stream our own copy of Pixel Run, playing itself, live on TikTok. When a viewer sends a gift on TikTok, their TikTok display name may appear on the stream for a few seconds to thank them. We don't keep those names, and TikTok's own privacy policy covers what happens on TikTok. Nothing about people playing Pixel Run on their own phones is ever shown on a stream.

Quarterturn accounts

A Quarterturn account is optional. It lets you sign in to our games and to other people's apps that offer "Sign in with Quarterturn". If you make one, we keep:

• Your account: your email address, the name you chose, when you made it, and that you said you are 16 or older (or that a parent or guardian made it).
• Sign-in codes: we email you a code to sign in. We keep a fingerprint of it for 10 minutes, never the code itself. The email is sent through Resend.
• Where you're signed in: for each browser signed in to this website, a fingerprint of its sign-in cookie, a short description of the browser (such as "Chrome on Android"), and when it was first and last used, for 30 days. For each app or game you've let in, which app, which device (the name the app gave, such as "Pixel 8"), what you allowed it to see, and when it was last used.
• Cloud saves: one save for each game that asks for one, with when it was saved and from which device.
• Discord, if you link it: your Discord user ID, username and the email address on your Discord account, so a link is only made when the emails can be checked. We never see your Discord password or messages.
• Apps you register as a developer: the app's name, its website and its allowed return addresses.
• Too-many-tries counters: your IP address, and a fingerprint of the email address being tried, counted for 10 minutes to stop people guessing codes.

An app you sign in to gets an ID for your account that is different for every app, and only what you allow on its sign-in page: your name, your email address, its own cloud save, each only if it asks. Pixel Run asks for your name and its cloud save, never your email address. You can see every device and app on your account page and sign any of them out there, change your email address, unlink Discord, or delete the whole account, which deletes everything above straight away; a sign-in code or too-many-tries counter still waiting runs out by itself within 10 minutes. A code for signing in on a device, made on your account page, works once and runs out after 10 minutes. The data is kept in Postgres on Neon (a database service), reached from our host, Vercel.

This website

This website has no analytics or advertising cookies. The only cookie is your sign-in, set when you sign in to a Quarterturn account. Our host may keep ordinary server logs (such as your IP address and the page you asked for) for a short time to keep the site running and safe.

Children

Our bots are for people old enough to use Discord, which Discord's own rules set at 13 or older (or the minimum age where you live). We don't knowingly collect personal information from anyone younger. If you think we have, tell us and we'll delete it.

Pixel Run is made for everyone, children included. It does not collect personal information from any player who doesn't sign in, of any age, and it treats everyone under 16 as a child (the highest age the EU's data rules set; the US's children's privacy law, COPPA, sets 13). Parents and guardians can ask us anything about it by email at hello@yourdomain.com, without needing a Discord account.

Your rights

Depending on where you live (for example in Australia, the UK, the EU or California) you may have the right to see, correct or delete your information, and to object to how it is used. We honour those requests for everyone, wherever they live. Write to us using the contact below.

Changes

If this policy changes, we'll change the date above and, for anything important, tell server owners through the bot or in our support server.

Contact

Questions, or want something deleted? Message us in our support server: discord.gg/6CDYr7gP.

About Pixel Run, or a parent or guardian? Email us at hello@yourdomain.com.