Privacy Notice

Who is responsible for my data?

PaintedApp, LLC.

PaintedApp, LLC runs Painted Circuit and is the controller of the personal data described here. Our address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it's useful to you or the law requires, and never sell it.

What happens when I search for a circuit?

Your browser asks OpenStreetMap's services directly. We aren't in the middle.

When you press Find Your Circuit, your browser sends what you typed to Nominatim, the search service the OpenStreetMap Foundation runs in the United Kingdom. When you pick a circuit, your browser asks an Overpass API server for its survey: first overpass-api.de, run by FOSSGIS e.V. in Germany, and when that one is busy, VK's public instance at maps.mail.ru in Russia. For the climb and the Relief style, your browser fetches elevation tiles from AWS Terrain Tiles on Amazon S3. Each of them sees your IP address and what was asked, as any website does. So that a trip to Stripe's checkout and back doesn't lose your circuit, the studio keeps its survey in this tab's session storage, which your browser clears when you close the tab.

What reaches you when I order?

The circuit's survey, your choices and the words you typed.

Nothing is sent to us until you press Order This Print. Then the studio sends the survey it drew from, the choices you made and every word you typed for the print: the circuit's name, your lap time, the car, the day, the event, your line and, for The Season, the other circuits and their times. Type only names their owners would be glad to see on a wall.

What about a note I send?

It comes to our support inbox, and that's where it stays.

The name, email, organisation and message you type on the organisers' page, or the circuit and email you leave when a lap doesn't close, go through Resend to support@painted.app, where a person reads them. If our mail isn't set up, the page offers to open your own email instead.

Do you use cookies or analytics?

No cookies and no analytics.

This site sets no cookie and runs no analytics, advertising pixels or third-party trackers. The cookie notice lists the one thing the studio keeps in your browser. Stripe's checkout page is Stripe's own and may set its own cookies to prevent fraud.

What do you collect when I order?

Only what it takes to make your print and get it to you.

• Your name and shipping address, to print and deliver your order. A Digital File or a gift code needs no address, so none is asked for.
• Your email address, to send your receipt and to reach you about the order.
• The circuit, your choices and the words you typed, to draw and print it.
• For a gift, the names and the message you write for the note.
• Your payment details never reach us. Stripe collects them directly; we see the outcome and nothing more.

We use these to carry out the order you placed, and we keep the record because tax and accounting law require it. There are no accounts.

Who else sees it?

Only the companies that make the order happen, and only the part each one needs.

• Stripe processes the payment and holds the record of your order, including the circuit, your choices and the words you typed.
• Prodigi or Printful prints and ships it, whichever of the two makes your print. That lab receives your name, shipping address, email address, the order details and the print file. Asking both labs for a shipping price sends only the product, its size and the country.
• Resend sends your receipt, your file or gift code, your tracking link and, if you said yes, the anniversary note.
• Vercel hosts the site and runs the checkout, and Vercel Blob stores the print file, a small preview of it, and the survey and words the print was drawn from, so a reprint matches the first.

Those files sit at addresses made from a fingerprint of the print itself: they're listed nowhere and can't be guessed. Some of these companies operate outside your country, including in the United States. We don't share your data with anyone for their own marketing.

Will you email me after I order?

About that order, yes. Anything more, only if you said yes.

Every order gets the emails it needs. If Stripe's checkout asks whether you'd like to hear from us and you tick yes, we send one note a year after your order, with a link that opens the studio on the same circuit. To stop it, reply to any of our emails or write to support@painted.app.

Where is my order kept, and for how long?

In Stripe and Vercel Blob. We keep no database of our own.

We keep them for support, for our promise on damaged or wrong prints, and for tax and accounting. Ask us to delete yours and we will, unless the law requires us to keep it.

What are my rights?

To a copy, a correction or a deletion, within 30 days.

Requests come by email, from the address you ordered with. If you're in the EEA or the UK you can also object, ask for portability, and complain to your data protection authority. If you're in California or another US state with a privacy law, you have the right to know, delete, correct and opt out; we don't sell or share personal information, and we honour Global Privacy Control signals all the same.

Children

This shop is for adults.

We don't knowingly collect data from anyone under 16. If a child has given us something, write to us and we'll remove it.