Privacy policy.

What we collect

An account is an email address, a display name, a password (stored only as a salted hash), and your yes to the 13+ question. Painting adds the layers you submit, their stroke logs (which power the replay and prove a hand made them), titles, votes, and flags. Operations add standard server logs (IP address, time, page) kept for security and rate limiting.

What we use it for

Email is for signing in and the letters you choose in settings: your turn, a bench call, titling, voting, a finished wall, a moderation decision. Display names sign your layers in the gallery. Logs keep the site standing. That is the entire list; there is no advertising here and no analytics beyond our own server counts.

What leaves the building

We sell nothing about you and we share nothing for marketing. Submitted layers pass through an automated screening model run on our own infrastructure before they hang. Outbound email travels through our mail provider. Finished public murals, their titles, and their crews' display names are public by design, under the CC BY NC 4.0 license described in the terms.

Children

Accounts are for people 13 and over. We do not knowingly collect personal information from children under 13; if we learn we hold any, we delete it. A parent or guardian who believes a child under 13 has an account can write to [email protected] and we will remove it.

Cookies

Two, both ours: a session cookie that keeps you signed in for 30 days and a security token that protects forms. Clearing them signs you out and resets nothing else.

Keeping and deleting

Close your account in settings and your email, password hash, and notification preferences are deleted. Your layers on finished walls remain, credited to your display name, because the wall belongs to its whole crew; ask at [email protected] if you want your name replaced with "a former member" instead. In-progress drafts are purged within 7 days of a hold ending.

Reaching us

[email protected] answers privacy questions within 14 days.