Privacy Policy

When you create an account we store your email address and, if you sign in with Google, the basic profile information Google shares (name and email).

During onboarding you choose a role (visitor, artist, or gallery) and fill in a short profile, with things like a username, a bio, a website, or a location. You decide what to share, and you can leave optional fields empty.

To create and secure your account, keep you signed in, and show your profile in the parts of ArtLab that need it. That is the whole purpose, nothing more.

Authentication and profile data are stored with Supabase, our database and auth provider. Access is restricted by row-level security, so each account can only read and edit its own profile.

Images and media files are served from Cloudflare R2. Your session stays in your browser so you do not have to log in on every visit.

We do not sell your data and we do not share it for advertising. The only third parties involved are the services that make the site work: Supabase (database and authentication) and Google (only if you choose Google sign-in).

You can view and edit your profile at any time from your account. If you want a copy of your data or want your account and profile permanently deleted, just write to us and we will take care of it.