A little less data.
A little more care.

What we store

We store your artwork, drawing and text data, PNG and thumbnail, chosen country or territory, nickname and visibility preference, submission and review dates, consent version and time, and moderation status.

A cryptographic hash of your management key lets us verify ownership without storing the key itself. Keep your key safe: it is shown only once. We do not use your nickname to authenticate you.

What becomes public

Only approved artwork is public. The page shows the work, selected country, creation month, and your nickname if you choose to show it. A nickname entered into the artwork itself remains visible as part of the image.

What we do not ask for

We do not request your real name, exact location, date of birth, or email address. We do not run advertising trackers. Avoid writing phone numbers, email addresses, home addresses, or sensitive details into your artwork or reports.

Security and simple event counts

For abuse prevention we keep short-lived, salted hashes derived from the network address, not raw IP addresses in application tables. Hosting infrastructure may have separate operational logs if the project is launched later.

We count basic actions such as selecting a country, beginning a canvas, submitting, and sharing. These counters contain an event type, country code where relevant, and day; they do not contain nicknames, artwork text, management keys, or persistent visitor IDs. Administrator sign-in uses a secure, short-lived session cookie.

Human verification can use Cloudflare Turnstile when configured. In this local beta it is explicitly bypassed only on the local development host. A public launch must configure verification and review its privacy disclosures.

Deletion and reports

Use Manage your mark to remove your artwork with your private key. Without the key, use the removal request form. Reports are visible to administrators and are not published. A reviewer may need evidence that you have authority to request a removal; nickname matching is not enough.

Children and personal information

This beta is not promoted to children and does not ask for children’s personal information. A final age and guardian policy must be established with legal advice before public launch.