Privacy Policy

Last updated: 8 October 2026

What we collect

• When you pay. Stripe processes your payment. We receive the amount, what you paid for, and the email on the order; we do not use or keep the email and never send email. We never see your full card number.
• Your nickname. A name such as @Dizzy_Neuron, chosen from a random id your browser keeps (see below), so it reveals nothing about you. It is shown next to your ideas and in a day’s credits. Clearing the site’s data in your browser gives you a new nickname.
• What you submit. The ideas you pay for are public, together with the pictures painted from them.
• Technical data. A salted hash of your IP address, never the address itself, to limit abuse; and a log of actions on the site (purchases, rejected texts, errors) for security and support.
• In your browser. Local storage keeps a random id and your nickname, so the page can mark your ideas as yours. There are no tracking cookies and no ads.
• Visit statistics. We count visits with Vercel Web Analytics. It sets no cookies and keeps only aggregated data: the page, the referring site, country, browser and device type, plus counts of actions such as adding an idea or sharing a painting. It does not identify you or follow you across sites; its daily visitor hash is discarded after 24 hours.

Why

To provide the service you paid for (performance of a contract); to prevent abuse and handle complaints (legitimate interests); and to keep payment records for tax and accounting (legal obligation).

Who processes it for us

• Vercel: hosting and visit statistics.
• Neon: database.
• Stripe: payments.
• Anthropic: the AI that screens submitted texts. Submitted texts are sent to it.
• fal.ai and Google: the AI image model that paints the pictures. The day’s ideas are sent to it; no personal data is.

Some of these providers process data in the United States. Transfers rely on standard contractual clauses or equivalent safeguards.

How long we keep it

• Ideas and pictures: in the public archive for as long as the site runs.
• Payment records: as long as accounting and tax law require.
• Action log: 90 days. Abuse-limit records: 1 day.

Your rights

You can ask for access to your data, correction, deletion or a copy, and you can object to processing. Write to hello@paintmob.com from the email you paid with. Deleting your data removes your nickname from your ideas and the credits; payment records we must keep for accounting stay until that obligation ends. Pictures that were painted are not changed. You can also complain to your data protection authority.

Children

PAINTMOB is not for anyone under 18.

Changes

We will update the date at the top of this page when this policy changes.