Privacy Notice

Who is responsible for my data?

PaintedApp, LLC runs Painted Sound and is the controller of the personal data described here. Our mailing address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it's useful to you or the law requires, and never sell it.

What happens to the sound I bring?

It stays on your device.

Your browser opens the file or the recording, decodes it, and measures 2,000 peaks: the highest and lowest point of each of 2,000 equal slices of the sound. The audio itself stays in the memory of this tab and is gone when the tab closes or reloads. It is never uploaded, and we never receive, store or hear it.

The 2,000 peaks and the sound's length are kept in this tab's session storage, so a reload doesn't lose them, and they leave your device only when you open checkout, so the print can be drawn. Your choices, meaning the form, the colours and the words, live in the page's address so you can bookmark them; anyone you share that link with sees those words, never the sound.

When do you use the microphone?

Only when you press Record.

Only when you press Record Ten Seconds. The browser asks your permission first; the page records at most ten seconds in this tab, turns the microphone off when it's done, and treats the recording exactly like a file: decoded and measured here, never uploaded.

What is processed where?

Do you use cookies or analytics?

No.

This site sets no cookies and runs no analytics, advertising pixels or third-party trackers. If that ever changes, this page changes first, and we'll ask before loading anything. Stripe's checkout page is Stripe's own: it may set its own cookies to prevent fraud, under Stripe's privacy policy.

What do you collect when I order?

Only what it takes to make your print and get it to you.

• Your name and shipping address, to print and deliver your order. A Digital File needs no address, so none is asked for.
• Your email address, to send your receipt and to reach you about the order.
• The print you set: the 2,000 peaks and the length of the sound, the form, the colours and your words, with the size and material you chose, to draw and print it. Never the audio.
• Payment details: we never receive them. Stripe collects and holds your card details directly; we see the outcome and nothing more.

We use these to carry out the order you placed, and we keep the record because tax and accounting law require it. There are no accounts, and no audio is ever uploaded.

Who else sees it?

Only the companies that make the order happen, and only the part each one needs.

• Stripe: payment processing. It collects your card and billing details directly and holds the record of your order, with the print's title and day.
• Prodigi or Printful: printing and shipping, by whichever of the two makes your print. That lab receives your name, shipping address, email address, the order details and the print file, and when your print ships we get the carrier and tracking number from it and email them on to you. Asking both labs for a shipping price sends only the print size and the country, nothing about you.
• Resend: sending your receipt, your file and your tracking link. It receives your email address and the message.
• Vercel: hosting the site, running the checkout and storing the print file. Like any web host, it sees your IP address when your browser asks for a page.

The print file, and a small preview of it, are stored on Vercel Blob at an unlisted address made from a fingerprint of your choices, so the same print ordered twice is drawn once. The file is a picture of the waveform, not the sound, and it is drawn when you open checkout, so it exists even if you don't go on to pay. The lab collects it from there to print. Like your order record, nothing deletes it on a clock today; ask us and we'll remove yours.

Some of these companies operate outside your country, including in the United States. We don't share your data with anyone for their own marketing.

Will you email me after I order?

About that order, and nothing else.

Every order gets the emails it needs: the receipt, your file, and for a print, the tracking link when the lab ships it. We send nothing later about a sound: no reminders, no anniversaries, no newsletter, and checkout doesn't ask to.

Where is my order kept, and for how long?

In Stripe. We keep no database of our own.

The record of your order, meaning what you bought, your email and the address it went to, lives in Stripe, and the lab that made your print keeps its own record of the job. We keep it for support, for our promise on damaged or wrong prints, and for tax and accounting. Nothing deletes it on a clock today; ask us to delete it and we will, unless the law requires us to keep it.

What are my rights?

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, and we'll act within 30 days. Because there are no accounts, requests come by email: write from the address you ordered with. If you're in the EEA or the UK you also have the right to object to processing, to ask for portability, and to complain to your local data protection authority.

If you're in California or another US state with a privacy law, you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We don't sell or share personal information, for money or for advertising, so there's nothing to opt out of. We honour Global Privacy Control signals all the same, and we'll never charge you differently for exercising any of these rights.

Children

This shop is for adults. We don't knowingly collect data from anyone under 16. If a child has given us something, write to us and we'll remove it.

Changes

If this notice changes, the date at the top changes with it. The terms of service and the shipping and returns page cover the rest of an order.