Privacy Policy

Information we collect

When you register, we collect your email address, username, securely hashed password, account type, verification and consent records, and security information associated with your sessions. If you use a passkey, we store its public credential and related technical information—not your fingerprint, face scan, device PIN, or private key.

Artists may provide a public name, biography, location, creative practices, styles, commission availability, profile image or studio logo, public contact address, social and portfolio links, and event or appearance information. Visitors may save private favorites. Reports may include the reporter’s email, reason, and details.

Public and private information

Published artist-profile content is public and may be viewed, linked to, copied, or indexed by search engines. Account email addresses, password hashes, favorites, drafts, passkey credentials, recovery-code hashes, administrative notes, and private reports are not intentionally displayed publicly. A public contact email appears only when an artist deliberately adds one.

How we use information

• Provide, secure, and administer accounts and artist profiles.
• Verify email addresses and deliver requested account messages.
• Display published profiles and appearances.
• Save private favorites and profile preferences.
• Prevent abuse, investigate reports, enforce our rules, and maintain audit records.
• Comply with legal obligations and protect users, artists, and the service.

We do not sell personal information. We do not currently use personal information for targeted advertising.

Cookies and similar technology

We use essential cookies for login sessions and short-lived security challenges. They are necessary for requested account and security functions. We do not currently use third-party advertising or analytics cookies, so no optional-cookie banner is shown. We will update this policy and request consent where required before adding nonessential tracking.

Service providers and disclosure

Information may be processed by vendors that help operate the service, including hosting and backups, transactional email, domain and DNS services, and security administration. They receive only the information reasonably needed for their work. We may also disclose information when legally required, to investigate abuse or security incidents, to protect rights and safety, or as part of a business transfer subject to appropriate safeguards.

Retention and deletion

Active account information is retained while the account is used. After confirmed deletion, the profile is hidden immediately, the account may be restored by an administrator for 30 days, and then account information is scheduled for permanent purge. Limited records may be retained when reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or backup rotation. Public content copied by others or indexed elsewhere may remain outside our control.

Your choices

You may update profile information, change and reverify your email, change your password, remove passkeys, unpublish profile content, and request account deletion through account settings. To request access, correction, or help with deletion, email tapintotheart@gmail.com. We may verify the request before acting.

Security and incidents

We use administrative, technical, and physical safeguards appropriate to this early-stage service, but no internet service can guarantee absolute security. If a qualifying breach occurs, we will investigate, contain it, and provide legally required notices.

Age and policy changes

Public pages may be browsed without an account. Accounts are currently limited to people age 18 or older. We may update this policy as the service changes. Material changes will be posted with a new effective date and, when appropriate, presented for renewed acknowledgment.

Washington privacy notice

Tap Into the Art is operated from Washington State. Privacy rights differ by location. We will honor applicable rights and update our procedures as the service grows into jurisdictions with additional requirements.