Privacy Notice

Who is responsible for my data?

PaintedApp, LLC runs Painted Course and is the controller of the personal data described here. Our mailing address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it's useful to you or the law requires, and never sell it.

What happens when I search for a course?

Your browser asks OpenStreetMap's services directly. We aren't in the middle.

When you press Find Your Course, your browser sends what you typed to Nominatim, the search service the OpenStreetMap Foundation runs in the United Kingdom. When you pick a course, your browser asks an Overpass API server for that course's survey: first the main instance at overpass-api.de, run by FOSSGIS e.V. in Germany, and when that one is busy, VK's public instance at maps.mail.ru. Each sees what any web server sees: your IP address, your browser, and the search or the course. Nominatim's handling is set out in the OpenStreetMap Foundation privacy policy.

Nothing is searched as you type: only when you press the button, and at most once a second. So that a trip to Stripe's checkout and back doesn't lose your course, the studio keeps its survey in this tab's session storage. Your browser clears it when you close the tab.

What reaches you when I order?

The course's survey, your choices and the words you typed.

Nothing is sent to us until you press Order This Print. Then the studio sends the survey it drew from, as OpenStreetMap holds it, with the choices you made and every word you typed for the print: the course name and town, your line, the date, and for The Round or The Ace, the player's name, the scores, the golfer's name, the club and the witnesses.

Names you type for The Round or The Ace may be a friend's. They are printed on the sheet and kept with the order, so type only names their owners would be glad to see on a wall.

What happens to a photograph I paint on the View?

It goes to OpenAI to be checked and painted, and we don't keep it.

When you press Paint My View, your photograph and the finish you chose go to OpenAI, which checks the photograph for content its rules refuse and whether a golf course is in it, then paints it. OpenAI receives the photograph and nothing else about you, under its API terms, which say it doesn't train its models on what the API is sent.

We keep the painting, a marked proof of it and a note of the finish in Vercel Blob, at an address made from a random number, so you can order the print. The photograph itself isn't stored by us. Ask us and we'll remove your painting.

If you order a print of a painting, Claid enlarges the painting to print size. It receives the painting, never the photograph, and nothing about you.

Painted Aerial, in the studio, sends OpenAI our own drawing of the course you chose, with every word and number left off it, and nothing about you. The painting and its proof are kept the same way.

What about a note I send from For Clubs, or a course you haven't mapped?

It comes to our support inbox, and that's where it stays.

The name, email, club and message you type, or the course and email you leave when a course isn't mapped yet, go through Resend to support@painted.app, where a person reads them. If our mail isn't set up, the page offers to open your own email instead, and nothing reaches us until you send it.

Do you use cookies or analytics?

One cookie, for painting only, and no analytics.

The View and the studio set one cookie, when painting is open, that counts your free paintings for the day; the cookie notice says what it holds. This site runs no analytics, advertising pixels or third-party trackers. The cookie notice lists the one thing the studio keeps in your browser. Stripe's checkout page is Stripe's own: it may set its own cookies to prevent fraud, under Stripe's privacy policy.

What do you collect when I order?

Only what it takes to make your print and get it to you.

• Your name and shipping address, to print and deliver your order. A Digital File or a gift code needs no address, so none is asked for.
• Your email address, to send your receipt and to reach you about the order.
• The course and your choices as the studio sends them, and the words you typed, to draw and print it.
• For a gift, the names and the message you write for the note. They go to Stripe with the payment and into the email that carries the code to you, and nowhere else.
• Your payment details never reach us. Stripe collects and holds your card details directly; we see the outcome and nothing more.

We use these to carry out the order you placed, and we keep the record because tax and accounting law require it. There are no accounts.

Who else sees it?

Only the companies that make the order happen, and only the part each one needs.

• Stripe processes the payment. It collects your card and billing details directly and holds the record of your order, including the course, your choices and the names you typed.
• Prodigi or Printful prints and ships it, whichever of the two makes your print. That lab receives your name, shipping address, email address, the order details and the print file, and when your print ships we get the carrier and tracking number from it and email them on to you. Asking both labs for a shipping price sends only the product, its size and the country, nothing about you.
• Resend sends your receipt, your file or gift code, your tracking link and, if you said yes, the anniversary note. It receives your email address and the message.
• For a print of a painting from the View, OpenAI has already painted it and Claid enlarges it for print, as the View section above says.
• Vercel hosts the site and runs the checkout, and Vercel Blob stores the print file, a small preview of it, and the survey and words the print was drawn from, so a reprint matches the first. Like any web host, Vercel sees your IP address when your browser asks for a page.

Those three files sit at addresses made from a fingerprint of the print itself: they're listed nowhere and can't be guessed. They're made when you open checkout, so they exist even if you don't go on to pay. Nothing deletes them on a clock today; ask us and we'll remove yours.

Some of these companies operate outside your country, including in the United States. We don't share your data with anyone for their own marketing.

Will you email me after I order?

About that order, yes. Anything more, only if you said yes.

Every order gets the emails it needs: the receipt, your file or your gift code, and for a print, the tracking link when the lab ships it.

When you order a print, Stripe's checkout may ask whether you'd like to hear from us; whether it asks depends on where you are. If you tick yes, we'll send one note a year after your order, with a link that opens the studio on the same course and the choices you made. We send no other note about that order. If you don't tick it, or it isn't offered, no note is sent.

To stop it, reply to any of our emails or write to support@painted.app before the year is up, and we'll mark your order so it isn't sent. Your answer is kept with your order in Stripe.

Where is my order kept, and for how long?

In Stripe and Vercel Blob. We keep no database of our own.

The record of your order lives in Stripe, the survey and print in Vercel Blob, and the lab that made your print keeps its own record of the job. We keep them for support, for our promise on damaged or wrong prints, and for tax and accounting. Ask us to delete yours and we will, unless the law requires us to keep it.

What are my rights?

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, and we'll act within 30 days. Because there are no accounts, requests come by email: write from the address you ordered with. If you're in the EEA or the UK you also have the right to object to processing, to ask for portability, and to complain to your local data protection authority.

If you're in California or another US state with a privacy law, you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We don't sell or share personal information, for money or for advertising, so there's nothing to opt out of. We honour Global Privacy Control signals all the same, and we'll never charge you differently for exercising any of these rights.

Children

This shop is for adults. We don't knowingly collect data from anyone under 16. If a child has given us something, write to us and we'll remove it.

Changes

If this notice changes, the date at the top changes with it. The terms of service and the shipping and returns page cover the rest of an order.