Privacy Policy

We process information you provide or generate when using the project, such as contact details, consent choices, purchase and transaction references, submitted creative material, destination links, moderation records, support communications, and limited technical or security data.

Payment details are processed by Stripe under its own privacy terms. The project receives transaction status and identifiers needed to fulfill and reconcile a purchase, but does not receive or store your full card number.

Interest emails are normalized, encrypted for delivery, and separately keyed-hashed for deduplication. Confirmation credentials are hashed, expire after 48 hours, and are single-use; raw credentials are not stored.

An unconfirmed request is not eligible for marketing updates. Each confirmation message includes a durable consent-control link that can withdraw one interest or globally suppress the keyed email identity without displaying the address. Opening the link does not change consent; submission is required to avoid email-client scanner side effects.

A globally suppressed address remains ineligible. Restoring one interest requires a new explicit form consent, a fresh confirmation, and an audit record; other withdrawn interests stay withdrawn. Transactional purchase messages are handled separately.

We use information to operate and secure the project, process purchases, moderate and publish submissions, communicate about participation, prevent abuse, maintain records, and meet legal obligations. Approved creative material, display names, stories, and destination links are intended for public display.

Optional product analytics are controlled by the on-page privacy setting. Public evidence uses settled aggregate counts. Outbound click records are minimized and must not store raw IP addresses, full user-agent strings, or full referrer URLs.

Infrastructure, database, payment, email, security, task-processing, and analytics providers process information for their service roles. Information may be retained for as long as reasonably needed to operate and archive the artwork, fulfill transactions, resolve disputes, enforce policies, maintain security, and comply with law.

Depending on where you live, applicable law may provide rights to access, correct, delete, restrict, or object to certain processing. These rights may be limited where records are needed for transactions, security, legal compliance, dispute resolution, or the integrity of the public archive.

No online service can guarantee absolute security. We use reasonable safeguards and data minimization, but you should not submit confidential information as creative material or public metadata.