Privacy Policy

Last updated: April 3, 2026

The Painting Ledger ("we", "us", or "our") operates thepaintingledger.com and the associated mobile application. This policy explains what information we collect, how we use it, and your rights regarding that information.

Information We Collect

We collect information you provide directly:

• Account data: Email address and username when you create an account
• Hobby data: Miniature collections, paint arsenals, commission records, army lists, and painting sessions you enter into the app
• Payment information: Processed securely by Stripe. We never store credit card numbers or payment details on our servers.
• Usage data: App activity to help us improve the product (e.g. which features are used)
• Photos: Progress photos you choose to upload to your profile

How We Use Your Information

• To operate the app and provide its features to you
• To process Pro subscription payments via Stripe
• To send transactional emails (shopping lists, account notifications) via Resend
• To send onboarding emails when you first sign up (you can unsubscribe at any time)
• To improve the product and fix bugs
• To display your public profile if you choose to make it public

Information We Do Not Collect or Sell

• We do not sell your personal data to third parties
• We do not serve advertising
• We do not share your data with third parties except as necessary to operate the service (Supabase for database/auth, Stripe for payments, Resend for email)

Data Storage

Your data is stored securely using Supabase (PostgreSQL database with row-level security). Each user's data is isolated and inaccessible to other users. Passwords are hashed and never stored in plaintext. Authentication is handled by Supabase Auth.

Public Profiles and Sharing

If you enable a public profile, your username, miniature collection, and any stats you choose to share will be visible to anyone with the link. You can disable your public profile at any time from within the app. Nothing is made public without your explicit action.

Third-Party Services

We use the following third-party services to operate The Painting Ledger:

• Supabase — database and authentication
• Stripe — payment processing
• Resend — transactional email
• Railway — backend hosting
• Netlify — frontend hosting
• Anthropic — AI features (scheme advisor, barcode identification). Queries are not stored or used to train models.

Cookies and Local Storage

We use local storage in your browser to keep you logged in and remember app preferences. No third-party advertising cookies are used.

Data Retention and Deletion

Your data is retained as long as your account is active. To request deletion of your account and all associated data, email info@thepaintingledger.com. We will delete your data within 30 days.

Children's Privacy

The Painting Ledger is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy as the app evolves. Material changes will be communicated by email or in-app notification. Continued use of the app after changes constitutes acceptance of the updated policy.

Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at the address below.