Legal
Privacy Notice
The chart keeps your place and time in your own browser. Only when you order do your name, email and shipping address leave it, and then only for the companies that take the payment, print your sky and deliver it.
Last updated
Who is responsible for my data?
PaintedApp, LLC runs Painted Skies and is the controller of the personal data described here. Our mailing address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it's useful to you or the law requires, and never sell it.
What happens to the place and time I set?
They stay on your device.
The place and minute live in the page's address, so you can bookmark or share a sky, and the last place, view and tone you chose are kept in this browser's local storage so the page opens where you left it. If you share a link, whoever opens it sees that place and time. Clearing this site's data in your browser removes what's stored.
The page asks for your location only when you press Use My Location, and the coordinates it gets stay in the page. The stars, the Sun, the Moon and the planets are computed in your browser; nothing about your sky is sent anywhere while you look at it.
Do you use cookies or analytics?
No.
This site sets no cookies and runs no analytics, advertising pixels or third-party trackers. If that ever changes, this page changes first, and we'll ask before loading anything. Stripe's checkout page is Stripe's own: it may set its own cookies to prevent fraud, under Stripe's privacy policy.
What do you collect when I order?
Only what it takes to make your print and get it to you.
- Your name and shipping address, to print and deliver your order. A Digital File or a gift code needs no address, so none is asked for.
- Your email address, to send your receipt and to reach you about the order.
- The sky you set: the place and its coordinates, the minute, the view, the ground and the stars, with the size and material you chose, to draw and print it.
- For a gift: the names and the message you write for the note. They go to Stripe with the payment and into the email that carries the code to you, and nowhere else.
- Payment details: we never receive them. Stripe collects and holds your card details directly; we see the outcome and nothing more.
We use these to carry out the order you placed, and we keep the record because tax and accounting law require it. There are no accounts and no uploads.
Who else sees it?
Only the companies that make the order happen, and only the part each one needs.
- Stripe: payment processing. It collects your card and billing details directly and holds the record of your order.
- Prodigi or Printful: printing and shipping, by whichever of the two makes your print. That lab receives your name, shipping address, email address, the order details and the print file, and when your print ships we get the carrier and tracking number from it and email them on to you. Asking both labs for a shipping price sends only the print and the country, nothing about you.
- Resend: sending your receipt, your file or gift code, your tracking link and, if you said yes, the anniversary note. It receives your email address and the message.
- Vercel: hosting the site, running the checkout and storing the print file. Like any web host, it sees your IP address when your browser asks for a page.
The print file, and a small preview of it, are stored on Vercel Blob at an unlisted address made from a fingerprint of your choices, so the same sky ordered twice is drawn once. The file is drawn when you open checkout, so it exists even if you don't go on to pay. The lab collects it from there to print. Like your order record, nothing deletes it on a clock today; ask us and we'll remove yours.
Some of these companies operate outside your country, including in the United States. We don't share your data with anyone for their own marketing.
Will you email me after I order?
About that order, yes. Anything more, only if you said yes.
Every order gets the emails it needs: the receipt, your file or your gift code, and for a print, the tracking link when the lab ships it.
When you order a print, Stripe's checkout may ask whether you'd like to hear from us; whether it asks depends on where you are. If you tick yes, we'll send one note a year after your order, with a link that opens the studio on the sky you chose. It's the only note we send about that order, and nothing else is ever sent on the strength of that yes. If you don't tick it, or it isn't offered, no note is sent.
To stop it, reply to any of our emails or write to support@painted.app before the year is up, and we'll mark your order so it isn't sent. Your answer is kept with your order in Stripe.
Where is my order kept, and for how long?
In Stripe. We keep no database of our own.
The record of your order, meaning what you bought, your email and the address it went to, lives in Stripe, and the lab that made your print keeps its own record of the job. We keep it for support, for our promise on damaged or wrong prints, and for tax and accounting. Nothing deletes it on a clock today; ask us to delete it and we will, unless the law requires us to keep it.
What are my rights?
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, and we'll act within 30 days. Because there are no accounts, requests come by email: write from the address you ordered with. If you're in the EEA or the UK you also have the right to object to processing, to ask for portability, and to complain to your local data protection authority.
If you're in California or another US state with a privacy law, you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We don't sell or share personal information, for money or for advertising, so there's nothing to opt out of. We honour Global Privacy Control signals all the same, and we'll never charge you differently for exercising any of these rights.
Children
This shop is for adults. We don't knowingly collect data from anyone under 16. If a child has given us something, write to us and we'll remove it.
Changes
If this notice changes, the date at the top changes with it. The terms of service and the shipping and returns page cover the rest of an order.