Privacy policy

Last updated: 22 September 2026

1. Who is responsible

3PIXL Studios PTE. LTD., 1 North Bridge Road, #B1-35, High Street Centre, Singapore 179094, is the controller for the processing described here. You can reach us at info@3pixl.com for anything in this policy, including requests about your data.

We are a Singapore company and handle personal data under the Personal Data Protection Act 2012 (PDPA). Where we offer this website to people in the European Union or the United Kingdom, we also apply the General Data Protection Regulation (GDPR) and refer to the legal bases it requires.

2. The short version

• We measure visits without cookies and without tracking anyone across sites.
• We do not use advertising cookies or profiling on this site.
• We do not sell personal data, and we do not share it for anyone else's marketing.
• Fonts are hosted by us, so loading this site does not call a font provider.
• The only data you actively give us is what you type into the contact form.

3. Visiting the website

This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser sends technical data that the host records in server logs so the site can be delivered and kept secure: IP address, date and time, the page requested, referring page, status code, amount of data transferred, browser type and operating system.

Purpose: delivering the site, stability, and defending against attacks and abuse. Legal basis under GDPR: Article 6(1)(f), our legitimate interest in operating a functioning and secure website. Under the PDPA this processing is necessary to provide the service you requested. Log data is deleted or anonymised by the host on a rolling basis, as a rule within 30 days.

We have a data processing agreement with Vercel. Because the company is based in the United States, data may be transferred there. Vercel is certified under the EU-U.S. Data Privacy Framework, including the UK Extension and the Swiss-U.S. Data Privacy Framework, and the EU Standard Contractual Clauses apply in addition.

4. Contact form and email

If you use the contact form we process the name, email address, optional company name, the topic you select, and the message you write. The form also records the moment the page was rendered, purely as a spam check, and that value is discarded after the check.

The message is delivered to us as an email through Brevo (Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France, registered with the Paris Trade and Companies Register under number 498 019 298), which acts as our processor. We do not store submissions in a database, and the form does not add you to any newsletter or marketing list.

Purpose: answering your enquiry, and where applicable taking steps before entering into a contract. Legal basis under GDPR: Article 6(1)(b) for enquiries that relate to a possible contract, otherwise Article 6(1)(f), our legitimate interest in replying to people who write to us. Under the PDPA we rely on the consent you give when you submit the form. We keep the resulting correspondence for as long as it takes to deal with your enquiry and afterwards only where retention periods require it.

If you write to info@3pixl.com directly, the same applies to the content of that email.

5. Applications and work enquiries

If you contact us about working with the studio, we process what you send us, including any links to your work, in order to assess the enquiry. Legal basis under GDPR: Article 6(1)(b), steps taken at your request before entering into a contract. We delete application data no later than six months after the process ends unless you agree to us keeping it longer.

6. Measuring visits

We use Vercel Web Analytics, run by our host, to see how many people visit and which pages they read. It sets no cookies and stores no identifier on your device. Visits are counted from a hash derived from the request, which is discarded within 24 hours, so a visitor cannot be recognised across different days or on any other website. We receive aggregate counts only: page, referrer, country, device type and browser. No profile is built and nothing is passed to advertisers.

Purpose: understanding which parts of the site are useful. Legal basis under GDPR: Article 6(1)(f), our legitimate interest in a site that works for the people reading it. Because no information is stored on or read from your device, this needs no consent banner under the ePrivacy rules.

7. Video on this site

Some pages show video. Films we host ourselves are delivered from this site's own domain and involve no third party.

Where we point to a video on YouTube, the page shows a still image stored on our own server and nothing is requested from YouTube until you press play. Only then does your browser connect to YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which receives your IP address and may set cookies under its own privacy policy. We use the youtube-nocookie.com domain for these embeds. Legal basis under GDPR: Article 6(1)(a), the consent you give by pressing play. You can watch the same material directly on YouTube instead.

8. Cookies and local storage

This site sets no cookies at all. Visitor measurement works without them, as described above, and nothing on the site requires a consent banner. If that ever changes we will ask for consent first and update this policy before the change goes live.

9. Who receives your data

• Vercel Inc., hosting, delivery and visitor measurement for this website.
• Brevo SAS, delivery of contact form messages by email.
• Google Ireland Limited (YouTube), only if you press play on an embedded video.
• Our own directors and staff, insofar as they need the data to answer you.

Beyond that we only pass on personal data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.

10. International transfers

We are based in Singapore, our hosting provider is based in the United States, and our email provider is based in France. Personal data may therefore be transferred outside your own country. For transfers out of the EU and the UK we rely on the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the Standard Contractual Clauses. Under the PDPA we take steps to ensure that recipients provide a standard of protection comparable to the Act.

11. Your rights

Under the GDPR, if it applies to you, you have the right to:

• access the personal data we hold about you (Article 15);
• have inaccurate data corrected (Article 16);
• have data erased (Article 17);
• have processing restricted (Article 18);
• receive your data in a portable format (Article 20);
• object to processing based on legitimate interests (Article 21);
• withdraw consent at any time, with effect for the future.

Under the PDPA you may request access to personal data we hold about you and how it has been used or disclosed in the past year, ask us to correct it, and withdraw consent for its collection, use or disclosure.

To exercise any of these, write to info@3pixl.com. We answer within one month. If you think we have handled your data badly you may complain to a supervisory authority in the EU or UK, or to the Personal Data Protection Commission in Singapore.

12. Security

This site is served over HTTPS. We apply technical and organisational measures appropriate to the risk, including access control on our own systems and encryption in transit. No system is perfectly secure, and we will tell you and the relevant authority without undue delay if a breach is likely to affect you.

13. Changes to this policy

We update this policy when the site or the services behind it change. The date at the top always reflects the current version.