Privacy policy

Your account

When you create an account, we keep:

• Your display name, and a handle made from it (your profile's address).
• Your email address, and when you joined.
• Your profile picture, if you sign in with Google or Facebook: the address of the one your Google or Facebook account has. Everyone sees it next to your name, on your profile, your drawings, your comments and in notifications. Without one, your initials show instead.

Signing in is handled by Firebase Authentication, a Google service. It keeps your email address and password (we never see your password), or the link to the Google or Facebook account you sign in with. If you sign in with Google or Facebook, it tells us your name, email address and profile picture. Your device remembers that you're signed in until you sign out.

If you haven't signed in

The first time you follow an artist, like or favorite a drawing, or save a drawing without signing in, we make an account for you without asking for anything. It has no name or email address, never shows on the site, and can't comment or publish. It keeps what you saved on our servers, and your device remembers it.

Creating an account later keeps everything it saved; signing in to an account you already have leaves it behind. Clearing this site's data in your browser, or removing the app, loses it on that device, but what it saved stays on our servers. To delete it, create an account, then delete that account.

Your drawings

When you press Save in the studio, we keep the drawing on our servers: its title, the image, a small preview, its timelapse (every stroke, in the order you made it) and its project file, which lets you open it again.

A saved drawing is private until you publish it: only you can see it. When you publish one, anyone can see its image, title and timelapse in the gallery and on your profile, with your display name and handle. Turning publishing off when you save it again makes it private again.

Follows, likes and favorites

The artists you follow, and the drawings you like or favorite, are kept with your account on our servers. Other people see them only as counts, such as a drawing's likes or an artist's followers.

What stays on your device

Some things are kept only on your device (in your browser's storage, or in the app), and aren't sent to us:

• Theme: whether you picked light or dark mode.
• Your comments: comments you post are kept on your device for now, so other people don't see them yet. So are your likes on comments.
• An email sign-in link: the email address you asked for a sign-in link with, until you open the link.

You can remove all of this at any time by clearing this site's data in your browser settings. That also signs you out, but doesn't delete anything on our servers.

What our servers receive

Like any website, when your browser or the app loads a page or image, our hosting providers receive the request: your IP address, browser type, the page requested and the time. Cloudflare delivers the site and may store drawings' files; Hetzner runs our server and database. We use this only to deliver the site, keep it secure and fix problems.

Other companies

• Google: Firebase Authentication, a Google service, handles signing in (see Your account). Your browser or the app contacts it when you sign in, when an account is made for you, and to keep you signed in. The studio also downloads its painting engine and a font from Google's servers (www.gstatic.com and fonts.gstatic.com), which receive your IP address and browser details. Profile pictures of people who sign in with Google are shown from Google's servers (lh3.googleusercontent.com), which receive the IP address and browser details of whoever sees them. If you sign in with Google, Google's own privacy policy applies to that too.
• Facebook: only if you sign in with Facebook. Facebook tells us your name, email address and profile picture, and its own privacy policy applies. Your picture is shown from Facebook's servers, which receive the IP address and browser details of whoever sees it. The app uses Facebook only to sign in: it doesn't report what you do in it to Facebook.
• Sharing and social links: the share buttons for X, Facebook and Pinterest, and our profile links in the footer, only contact those services when you click them. Their own privacy policies apply from then on.

We don't sell or rent information about you, and we don't use advertising or analytics services.

How long we keep it

We keep your account, and everything you saved with it, until you delete it. An account made for you without signing in is kept the same way. Our nightly database backups are kept for 14 days.

Deleting your account

You can delete your account at any time, at slimberpaint.com/delete-account or in the app (open the account button, then Delete account). Your account and everything in it are deleted right away: your drawings with their images, timelapses and project files, your comments, likes, favorites and follows, and your sign-in with Firebase. Copies in our nightly database backups are gone within 14 days. If you can't sign in, email [contact email] from the address you signed up with.

Children

SlimberPaint is open to young artists. You need to be at least 13 to create an account, and we don't knowingly collect personal information from anyone younger. If you think a child has given us personal information, contact us and we'll delete it.

Your rights

Depending on where you live, you may have the right to ask what information we hold about you, and to have it corrected or deleted. You can delete your account yourself (see above); for anything else, email [contact email].

Changes

When this policy changes, we'll update the date at the top. If a change affects how we use information you've already given us, we'll tell you on the site first. See also the Terms of use.