Privacy

Painted Deep is run by [[ENTITY NEEDED]]. Write to support@painted.app with any question about your data.

In the studio

The studio runs in your browser. When you search, your browser sends the words to Nominatim, run by the OpenStreetMap Foundation in the United Kingdom. For a spot frame up to 150 km across, your browser asks the Overpass API at overpass-api.de, run by FOSSGIS e.V. in Germany, for the coast's names, and if that server is busy, VK Maps' public Overpass instance at maps.mail.ru, run by VK in Russia. Each of them sees your IP address, your browser and the search or the area asked for. We see none of it.

The depths and the pictures

The studio asks our server for the depth grid, the undersea names and, for the Satellite style, the land's picture. Our server asks NOAA, Lamont-Doherty's GMRT, the IHO Data Centre's gazetteer on Esri's ArcGIS Online, Marine Regions, Element 84's Earth Search and Amazon Web Services, the USGS and NASA's GIBS. They see our server's request and never your IP address. For The Oblique, your browser fetches terrain tiles from Amazon Web Services directly.

Your pin

Your pin is kept as a place on the drawing, two numbers between 0 and 1, never as a coordinate. It lives in the page's address and, when you order, in the order itself. The print sets the name you type beside it and never an address.

When you order

The studio sends our server the frame, your choices, your pin's place on the sheet and every word you typed for the print. The server reads the grid again, draws the print and stores it and its preview in Vercel Blob (Vercel Inc., United States). Stripe (Stripe, Inc., United States) takes your payment and holds your name, email, shipping address and the order. The print file and your shipping address go to the printer that makes it: Prodigi (Prodigi Group Ltd, United Kingdom) or Printful (Printful Inc., United States). Our emails go through Resend (Plus Five Five, Inc., United States). Our site is hosted by Vercel, which keeps request logs.

Notes you send

What you type into the dive shops and clubs form is emailed to us through Resend and kept in our inbox for as long as the conversation needs.

Cookies and tracking

We set no cookies and run no advertising or analytics trackers. Stripe sets its own cookies on its checkout page; the cookies page says more.

How long

Stripe keeps the order record as the law on business records asks, typically seven years. Print files and previews stay in Blob so a damaged print can be made again. A year after an order, if you agreed at checkout, we send one note with a link back to the studio; we send nothing else.

Your rights

Wherever you live, you can ask us what we hold about you, have it corrected, or have it deleted where the law on business records allows. Residents of the EU, the UK and California have these rights in law, and may complain to their data protection authority.