Privacy

What we collect

When you sign in. We use Google or GitHub to sign you in. From them we receive your email address, display name and avatar image. We never receive or store your password for either service.

When you buy space. We store the region you bought, the price paid, the title and destination link you chose, the artwork you uploaded, and the display name you attached to it.

When you pay. Payment is handled entirely by Stripe. Card numbers never reach our servers and we cannot see them. We receive only a confirmation that a payment succeeded, and the amount.

What is public

Anyone can see, without signing in: your artwork, its title and destination link, the display name on it, the price paid, and the date. Resales additionally show the buyer and seller display names and the sale price on the market page.

Your email address is not shown publicly anywhere on the board.

Who else processes your data

• Supabase — database, sign-in and image storage
• Stripe — payment processing
• Railway — application hosting
• Google and GitHub — sign-in, if you choose to use them

We do not sell your data, and we do not share it with advertisers or data brokers.

Cookies

We set one kind of cookie: the session cookie that keeps you signed in. There are no advertising or third-party tracking cookies on this site.

Keeping and deleting your data

Purchased space and the sales record are kept for as long as the board exists — the board is a public ledger of who bought what, and removing entries would misrepresent it.

You can ask us to delete your account and personal details at any time by writing to johnnyhashim@gmail.com. Where we are required to keep a payment record, we will keep the minimum needed and detach it from your account.

Contact

Questions about any of this go to johnnyhashim@gmail.com.