Privacy policy

We collect only what's needed for the service to work. In practice:

• Account details — name, email, password (encrypted, never stored as plain text) and phone if you provided one.
• Shipping details — address, city and postcode, so the print reaches the right wall.
• Wall photos and briefs — the photos and descriptions you upload so artists can create for you. These are photos of your home, and we treat them accordingly.
• Artist content — portfolio, bio, profile photo and social links that artists choose to publish.
• Google sign-in — if you choose it, we receive your name, email and profile photo from Google. Not your password, and no access to your Google account.
• Basic usage data — a session cookie needed to recognize you between pages.

Three purposes, no surprises:

• To run the service — matching briefs with artists, processing orders, shipping your artwork and paying artists.
• To communicate with you — operational emails (order confirmations, status updates, notifications you asked for). Marketing emails go only to those who signed up, and every email includes an unsubscribe option.
• To improve and secure — detecting faults and misuse.

We don't sell your information. We don't trade it. Period.

Only who must, and only as much as they must:

• Artists — see the brief and wall photo you published (that's what you published them for), and the orderer's name. Not your contact details or address.
• Service providers — server hosting, our email delivery service (Resend), video and social embeds (Vimeo, Instagram via iframely) and Google sign-in. Each receives only the minimum its role requires.
• Production and delivery partners — shipping name and address only, so the order arrives.
• Authorities — only if the law requires us to.

We use one essential cookie — the session cookie that recognizes you between pages. Without it you can't sign in. We have no advertising or third-party tracking cookies. External embeds (such as a Vimeo video or an Instagram profile on an artist page) may set their own cookies under their own policies — they load only on the pages where they appear.

Visit statistics are measured by us alone, with no cookies and no data passed to any third party: we keep an anonymous identifier that rotates daily and can't identify you or track you over time. The data is deleted after 90 days, and we honor the browser's "Do Not Track" signal.

As long as you have an active account, the information is kept so the service works. Deleted your account or asked to be erased? We delete your personal information, except what we're legally required to keep (such as transaction records for tax and accounting purposes).

Under the Protection of Privacy Law, 5741-1981 (including Amendment 13), you have the right:

• To access the information we hold about you.
• To correct inaccurate or outdated information (most of it can be edited directly on your account page).
• To delete — request deletion of your information and account.
• To unsubscribe — one click at the bottom of every email, or on the notification preferences page.

For any request: Write to us and we'll handle it promptly and free of charge.

Communication with the site is encrypted (HTTPS), passwords are stored as one-way hashes only, session cookies are digitally signed, and access to data is limited to a small team that needs it to operate. No system is 100% immune, but we take your data security as seriously as a gallery guarding original works.

The service is intended for ages 18 and up. If we discover we've collected information about a minor without parental consent — we'll delete it.

If we materially update this policy — we'll let you know. Questions, access or deletion requests? Talk to us and we'll get back to you.