iArtsy

Privacy notice

Open Beta · Updated October 25, 2026

iArtsy is operated by Nick Shonkwiler. Questions or requests about your information can be sent to support@iartsy.co. When iArtsy is publicly open, the landing page and its Featured gallery are public. During private testing or maintenance, access or participation may be restricted. An account and verified email are required to participate.

What we collect and why

• Account information: email, account identifier, email-verification status and password hash, to sign you in and protect your account. Supabase manages authentication. Passwords are not shown on profiles or sent in email.
• Your artist profile: name, username and optional bio, to identify your work in the community. You may use an artist name; do not include your address, school, phone number or other sensitive information.
• Your contributions: drawings, titles, recorded brush strokes retained from earlier submissions, comments, replies, comment likes, votes, follows, theme suggestions and their timestamps, to run the drawing community and Featured selections.
• Safety and administration: reports, blocks, moderation actions, account status, dated Terms/Privacy acceptance records, announcement editing history, and email consent/preference records, to investigate abuse and operate the service.
• Usage information: signed-in account activity dates and first/last activity times, to measure community participation. Moderators see aggregate activity statistics. Hosting, authentication and email providers also process connection and delivery information, such as IP addresses and logs, to operate and secure their services.

Who can see what

Featured drawings, their titles, prompt names and artist handles are visible on the public landing page without an account. Other community data remains protected. Your artist name, username, bio, approved drawings, comments, votes/counts and profile statistics are community content. Drawing and profile changes publish immediately; moderators review reports. Email addresses and authentication credentials are not included in community profiles or feeds. Authorized operators and service providers can access information needed to run the service. Moderators have access according to their assigned permissions.

Optional email updates

Optional announcements and maintenance emails require a separate, affirmative opt-in. Creating an account or agreeing to the Terms does not subscribe you. Existing account addresses are not automatically enrolled. We record your account identifier, the email address you opted in with, the consent wording version and time, your preferences, and subscription delivery/synchronization status. Resend maintains the corresponding email contact and unsubscribe status. You can unsubscribe in Settings or through the email unsubscribe link. Your account and artwork are preserved when you unsubscribe. Necessary account emails, including requested sign-in links, confirmations and password recovery, are separate from optional announcements. Changing your account email requires a new opt-in for the new address; the old address is removed from the announcement subscription. We do not sell subscriber addresses.

Service providers

OpenAI Sites hosts the website; Supabase provides authentication, database and drawing storage; Resend delivers account emails and manages opted-in announcement contacts, email delivery information and unsubscribe preferences; GoDaddy manages the domain. Hosting infrastructure may involve Cloudflare. Cloudflare Turnstile, if enabled on the sign-in form, processes browser signals for bot protection. No OpenAI image or text moderation service is currently connected. We do not sell personal information or use advertising networks. Resend may process email delivery and interaction information according to the sending settings; it also processes unsubscribe requests. Optional email subscriptions do not publish your email on your profile.

Browser storage

Your browser stores a sign-in session so you stay logged in, draft drawings, art-tool preferences and which collections you have viewed. Editable drafts and their brush strokes stay in that browser. New submissions upload the finished image and title, without the editable strokes; historical stroke records from earlier submissions remain stored. Signing out removes the sign-in session, but drafts and preferences may remain on that device; clearing site data removes them. Use a private device for your account.

How long information is kept

Account and contribution records are kept to provide the community while your account exists. Moderator removal or a drawing reset hides or archives content; it is not permanent erasure. Account-level activity records older than 90 days are removed by a scheduled job. Account deletion removes the active account and associated community records and uploaded artwork; interrupted deletions remain hidden until completed. Limited security/audit records and provider logs or backups may persist under their separate retention processes. Contact us for the applicable retention details or a specific request; deletion does not recall copies someone already downloaded.

Your choices and requests

You can edit your profile, block artists, sign out, and request account deletion in Account settings. You can also email us for access, correction, deletion, restriction, objection, withdrawal of consent where applicable, or help exporting information. We may ask for proportionate verification to protect your account; never send us your password. We will handle requests and complaints as required by applicable law. Where applicable, you can complain to your data protection authority.

Age and international availability

The intended audience is age 13 and above, including international users. An age declaration is not proof of age or verified parental consent. Participation is subject to the age and parental-permission requirements where you live. Country-specific privacy and international-transfer arrangements remain under review during this beta. Do not register if you are under 13, or where required parental permission has not been arranged. A parent or guardian can contact us about an underage account.

Security and changes

We use encrypted connections, authentication, restricted database access and moderation permissions. No service can promise absolute security. Announcement banners may store a non-sensitive dismissal preference in your browser. A new banner revision can appear again. Email preference and policy acceptance records are stored against your account, so these choices can carry between devices. Report a security concern to the contact above without sharing other users' data. Material policy changes will be dated here and may require renewed acceptance. This beta notice will be updated as services, legal bases, retention arrangements and international safeguards are finalized.