Privacy policy

What we collect

• Email address and password (or your Google sign-in), so each person gets one click and so we can tell you when the finished piece is ready. Passwords are stored hashed by our auth provider.
• Username, shown publicly with your mark.
• Where and when you placed your mark. The position is public, since it is the artwork.
• Confirmations that you're 18 or older and accepted the terms.

What other people can see

Anyone can see every mark on the canvas. Hovering over or tapping a mark shows the username and the date it was placed. Your email address is never shown.

How we use it

• To check that you only place one mark.
• To email you once when the finished piece is ready, and for account messages such as password resets.
• To prevent abuse of the site.

We don't send marketing email and we don't sell your email address.

Who handles your data

We use Supabase for accounts and the database, Vercel for hosting, and optionally Cloudflare Turnstile to block bots. Google handles sign-in if you choose Google. These providers process data on our behalf.

Keeping and deleting data

We keep your account until you ask us to delete it. When you do, we remove your email, username and password. Your mark stays on the canvas as part of the artwork, but is no longer linked to you.

Your choices

You can ask to see, correct or delete your data at any time by emailing hello@example.com.

Who runs this

Skyline Avenue LLC. Read the terms of use for ownership of the artwork.