What we keep, and what we don’t

Painted is a family of studios that share one sign-in, run by PaintedApp, LLC. This page covers the index you are reading and the account behind it. Each studio has its own notice for the work it does with your photograph.

This site stores nothing of its own

paintedfamily.com keeps no customer tables. It is a directory and a front door. The only thing it holds is your sign-in, and that lives in the same customer directory every studio uses — which is the point: sign in once here and it is the same account at every house.

Your account page reads across the studios you have ordered from and shows you what it finds. It reads only; it can only ever see rows that are yours, because the database enforces that on your own session rather than trusting this site to ask nicely.

What signing in collects

An email address, and — if you sign in with Google or Apple — the name and profile photo that provider chooses to hand over. We do not receive your password, and with Apple’s private relay we do not receive your real address either. We use it to know it is you, to show your orders in one place, and to write to you about them.

What the studios hold

Photographs, artwork, orders and shipping addresses belong to the studio you ordered from, and its own privacy notice governs them. The shared piece is your identity, not your work: no studio writes to you on the strength of what you did at another.

No tracking

This site runs no analytics, no advertising pixels and no third-party trackers. It sets one cookie of its own: the one that keeps you signed in. There is no consent banner because there is nothing to consent to. If that changes, this page changes first.

One outside script does load for visitors who are not signed in: Google’s sign-in script, which offers “Continue as” with one tap. Google sees that the prompt was offered here, and sets a g_state cookie that remembers whether you closed it. It learns who you are only if you choose to continue. The cookie page lists both cookies.

Sale, sharing and Global Privacy Control

We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is nothing to opt out of, so a Global Privacy Control signal has nothing left to switch off; it is honoured all the same, and asking about it never costs you anything.

How long we keep it

Your sign-in record stays until you ask us to delete it. This site keeps nothing else, so there is no other clock to state here; each studio’s notice gives the periods for the photographs and orders it holds.

Who else is involved

Supabase holds the customer directory and the studios’ data. Google and Apple handle sign-in if you choose them, and they see that you signed in to Painted. Vercel hosts the site. That is the whole list for this site. Payment processors and print partners are engaged by the individual studios, at the point you order, and are named in their notices.

Nobody in that list gets your data for their own marketing. We do not sell it.

Getting it back, or getting rid of it

Ask us for a copy of what we hold, ask us to fix it, or ask us to delete it, and we will act within 30 days. Deleting your account closes the door at every house at once, so tell us if you want a studio’s order history kept for warranty or reprints.

In the EEA or UK you can also object, ask for portability, and complain to your data protection authority. In California you can know, delete, correct, and opt out of sale or sharing — we do neither, and asking never costs you anything.

Write to support@painted.app and say what you want done.

Children

The studios sell to adults. We do not knowingly collect anything from a child under 16. If one has reached us, write and it goes.

Who we are

PaintedApp, LLC, 1327 SE Tacoma St #394, Portland, OR 97202. support@painted.app.

Changes

The date at the top says when this last moved, and the legal page keeps a dated line for every change.