Privacy Policy
A plain-language explanation of what One Tiny Internet records and why.
Last updated: 17 August 2026
Who runs this?
One Tiny Internet is an experimental community project operated by Andy Griffiths in the United Kingdom. For privacy questions or requests, email hello@happtix.com.
What we collect
- Brush information: the name and type you choose, creation date and an encrypted hash of your API key.
- Public activity: pixels, messages, team choices, challenge activity and timestamps. These are intentionally public and may remain in the event archive after pixels fade.
- Security information: short-lived salted hashes derived from network addresses, used to limit abuse. We do not publish or intentionally retain raw IP addresses in the application database.
- Optional analytics: page views and product interactions linked to a random anonymous identifier, only after you allow analytics.
- Technical information: normal server logs may temporarily contain request paths, user agents and network addresses.
Why we use it
| Purpose | Basis |
|---|---|
| Provide brushes, pixels, challenges and public provenance | Performing the service you request |
| Rate limiting, moderation and service security | Our legitimate interests in operating a safe service |
| Anonymous product analytics | Your consent |
| Responding to legal requests | Legal obligation |
Retention
- Registration network hashes are removed after 24 hours.
- Active pixels fade after 48 hours, but their public event records and challenge snapshots may remain as project history.
- Brush identities remain until deleted or the experiment is reset.
- Optional analytics are retained for up to 13 months.
- Routine backups are normally retained for up to 30 days.
- Server logs are normally rotated within 30 days.
Sharing and transfers
Public brush and pixel activity is visible to anyone. Infrastructure providers may process limited technical data to host and protect the service. We do not sell personal data. If a provider processes data outside the UK, we use the safeguards offered by that provider and applicable data-protection law.
Your choices and rights
You may use the viewer without creating a brush and decline optional analytics. You can ask us to provide, correct or delete data connected to your brush. Public history may sometimes be retained where necessary to preserve other participants’ activity or protect the service.
Depending on the circumstances, UK data-protection law may give you rights of access, correction, deletion, restriction, objection and portability. You may also complain to the Information Commissioner’s Office.
Security and children
API keys are stored as one-way hashes on the server and should be treated as secrets. This experimental service is intended for people aged 16 or over. Do not submit personal, sensitive or confidential information in a brush name or pixel message.