Last updated: February 22, 2026
Introduction
This privacy policy applies to Artwalls ("we," "us," "our"), the web application
available at https://artwalls.space.
Artwalls is an online marketplace that connects local artists with venues for rotating
artwork displays and sales.
This policy describes the information we collect from artists, venues, buyers, and
visitors, how we use and share that information, and your choices. It covers all data
collected through our website, including data received from third-party sign-in
providers such as Google.
Google User Data
Artwalls offers "Sign in with Google" as an authentication option. When you choose to
sign in with your Google account, we receive the following information from Google:
- Google account email address — used to create and identify your Artwalls account.
- Display name — used to pre-fill your profile name so you don't have to type it again.
- Profile photo URL — used to display your avatar within the app.
How we use Google user data:
- Authenticate you and create or sign in to your Artwalls account.
- Pre-fill your display name and profile photo for convenience.
- Communicate important account and service updates to your email address.
How we store Google user data:
- Your Google email, name, and profile photo URL are stored in our database hosted on Supabase infrastructure.
- Authentication tokens are managed by Supabase Auth and are not directly accessible to our application code.
How we share Google user data:
- We do not sell, rent, or trade your Google user data to any third party.
- Your Google data is shared only with our infrastructure providers (Supabase for auth/database, Cloudflare for hosting) as necessary to operate the service.
- Your display name and profile photo may appear on your public artist or venue profile if you choose to make it public.
Artwalls' use and transfer of information received from Google APIs adheres to the
Google API Services User Data Policy,
including the Limited Use requirements.
What We Collect
- Account information — name, email address, password hash (for email sign-up), and role (artist or venue).
- Profile information — bio, profile photo, social links, city, and public display name.
- Venue information — venue name, address, wall dimensions, photos, and hosting preferences.
- Artwork information — titles, descriptions, photos, pricing, dimensions, and availability.
- Analytics events — QR-code scans, page views, and marketplace interactions we use to generate reports for artists and venues.
- Device & cookie basics — browser type, operating system, IP address, and essential cookies required to keep you signed in.
How We Use Your Data
- Operate the marketplace — display artwork, match artists with venues, manage scheduling, and facilitate sales.
- Process payouts — calculate commissions, send earnings to artists and venues, and generate statements.
- Provide support — respond to messages, troubleshoot issues, and communicate service updates.
- Prevent fraud & enforce policies — detect abuse, enforce our Artist and Venue Agreements, and protect the community.
- Improve the platform — analyze usage patterns, run analytics, and develop new features.
Payments (Stripe)
All payments and payouts are processed by
Stripe.
When you make a purchase or set up payouts, your payment details are collected directly
by Stripe. We never store full credit-card numbers on our servers.
We retain only the Stripe account/customer IDs needed to manage transactions and issue refunds.
Authentication, Database & Hosting
- Supabase — provides authentication (email/password and Google OAuth sign-in) and hosts our PostgreSQL database. Your account data, content, and auth tokens are stored in Supabase infrastructure.
- Cloudflare — serves the website and API via Cloudflare Pages and Workers. Cloudflare may process request logs, IP addresses, and traffic metadata as part of normal CDN operation.
When We Share Information
- Public profiles — artist profiles, venue profiles, curated sets, and QR-linked artwork pages are publicly visible by design.
- Service providers — we share data with Stripe (payments), Supabase (auth & database), and Cloudflare (hosting) solely to operate the service.
- Legal obligations — we may disclose information when required by law, subpoena, or to prevent harm.
- No selling of data — we do not sell, rent, or trade your personal information to third parties for marketing purposes.
Cookies & Analytics
We use essential cookies to maintain your session and authentication state.
We also record analytics events — such as QR-code scans, artwork views, and
marketplace interactions — to provide artists and venues with performance dashboards.
We do not use third-party advertising trackers. You can control cookies through your
browser settings, though disabling essential cookies may prevent sign-in.
Data Retention
We keep your account and transaction data for as long as your account is active and as
needed to provide the service, comply with legal and accounting obligations, and enforce
our agreements. If you delete your account, we will remove or anonymize your personal
data within a reasonable timeframe, except where retention is required by law.
Security
We use industry-standard practices to protect your information, including HTTPS
encryption, secure authentication via Supabase, role-based access controls, and
row-level security on our database. No system is perfectly secure — you are responsible
for keeping your login credentials confidential.
Your Rights
- Access & update — manage your profile and account settings directly in the app.
- Export — request a copy of your personal data by emailing us at support@artwalls.space.
- Deletion — request account deletion by emailing support@artwalls.space; we will confirm and process your request. This includes deletion of any Google user data we hold.
- Revoke Google access — you can revoke Artwalls' access to your Google account at any time via your Google Account permissions page.
- Cookies — adjust browser settings to control cookies; essential cookies may be required for core functionality.
- Communications — opt out of non-essential emails where available.
Children
Artwalls is not directed to children under 13. If you are under 13 (or the minimum age
required by applicable law), please do not use the service.
Changes to This Policy
We may update this Privacy Policy to reflect changes in the law or our services.
Material changes will be posted on this page and, where appropriate, notified via
in-app notice or email. If we change how we use Google user data, we will notify
affected users and obtain consent where required. The "Last updated" date at the top
shows the current version.