Privacy Policy

When you create an account we store your email address and, if you sign in with Google, the basic profile information Google shares (name and email).

Creating an account creates an artist profile with a username, and nothing else is asked of you. Anything else on it, a name, a photo, a bio, a nationality, links, and the works you upload, you add yourself in your studio, whenever you want, and you can leave it all empty.

To create and secure your account, keep you signed in, and show your profile in the parts of ArtLab that need it. That is the whole purpose, nothing more.

Authentication and profile data are stored with Supabase, our database and auth provider. Access is restricted by row-level security, so each account can only read and edit its own profile.

Images and media files are served from Cloudflare R2. Your session stays in your browser so you do not have to log in on every visit.

We count visits with Umami, running on our own server. It sets no cookies and stores nothing that identifies you: only which pages are viewed, the referring site and campaign link, the browser, device type and country, and anonymous counts of actions such as a button pressed or a sign-up or purchase completed, all in aggregate.

When something on a page breaks, an error report goes to Sentry, stored in the EU, so we can fix it: what failed, on which page, and the browser and device. It carries no IP address and no account details. A report may include a short replay of what the page showed just before the error, with every text, form field and image hidden.

We do not sell your data and we do not share it for advertising. The only third parties involved are the services that make the site work: Supabase (database and authentication), Google (only if you choose Google sign-in), Cloudflare (image and media hosting), Resend (the emails we send you), Sentry (error reports), and Stripe (payment and billing, only if you take a paid plan).

Some emails are part of the service and cannot be turned off while your account is open: sign-in codes, password resets, and confirmations of things you asked for.

Separately, now and then we write a letter about ArtLab itself: what is new on the site, what other artists are doing with it. We send these on the basis of our legitimate interest in staying in touch with the people who opened an account here, and we keep them to ArtLab. We do not write to you about anyone else, and we never pass your address to another sender.

You can also subscribe to that letter without an account, from the form at the foot of the site or at the end of an interview. Then the basis is your consent, given by submitting the form: we store your address, the page you subscribed from and the date, and we use them for nothing else.

When you open an account, the curator also writes to you a few times in your first two weeks, about finishing your page and about the hour you can book with her. Each of those letters goes out only if it still applies (for example, only if your page is still empty), they stop as soon as you buy anything, and they carry the same unsubscribe link.

If you download the portfolio checklist, the basis is your consent, given by submitting that form: we send you the checklist, two short letters from the curator over the following week, and then the letter above. We keep the date you asked and where you are in that short series, and nothing else.

Every one of those letters carries an unsubscribe link that works immediately. You can also object at any time by writing to us. Unsubscribing stops the letters and changes nothing about your account.

You can view and edit your profile at any time from your account. If you want a copy of your data or want your account and profile permanently deleted, just write to us and we will take care of it.