Privacy Policy

Version 1 — July 25, 2026

The short version: we collect what the site needs to work, we don't sell it, and you can delete it.

What we collect

Account data: your email address and sign-in credentials, handled by Firebase Authentication (Google). We store your email, a display name if you set one, and whether your account is an artisan or seeker account.

Profile content (artisans): everything you put on your public page — studio details, location, photos, pricing history — is public by design. Location text may be converted to map coordinates using OpenStreetMap's Nominatim service.

Messages, reviews, saves, blocks, and reports: stored so the features work. Messages are visible to the two parties in the conversation and to site administration when reviewing a report.

We do not run advertising, sell personal data, or use third-party tracking. Server logs (IP addresses, requests) are kept for operations and security and rotate out routinely.

Emails we send

Account emails (verification, password reset) via Firebase, and service notices such as gallery-moderation decisions. No marketing without a separate opt-in.

Deletion

Both account types can delete their account from the dashboard at any time. Deletion removes your profile, uploaded images, messages, saves, and blocks from the live site, and your sign-in credentials from Firebase. Reports you filed are kept in de-identified form; database backups age out on a rolling schedule.

Questions

Use the Contact link in the footer.