Privacy Policy

1. What we collect

• Email address - used for authentication (one-time codes) and operational notifications (outbid alerts, moderation notices).
• Display name - chosen by you at registration. This is the only information shown publicly.
• Pixel art - the content you paint on tiles you own. This is publicly visible on the globe.
• Payment records - transaction amounts and timestamps when you purchase tile claims. Payment processing is handled by NowPayments; we do not store cryptocurrency wallet addresses or payment credentials.
• Session tokens - stored in an HttpOnly cookie to keep you signed in.

2. How we use it

• To authenticate your account via email one-time codes.
• To notify you when a tile you own is outbid or moderated.
• To enforce account limits (one free tile claim per account).
• To maintain tile ownership history visible to all users.
• To operate and improve the platform.

3. Third parties

Payments are processed by NowPayments. Their privacy policy governs any data you provide to them during checkout. We share your transaction details with NowPayments only as necessary to process payments.

We may use Sentry for error monitoring. Sentry may receive anonymised technical data (error messages, stack traces) but does not receive personal identifiers.

We do not sell, rent, or trade your personal data.

4. Email addresses

We store the email address address you enter, and we may display it back to you. It is not displayed to anybody else.

5. Cookies & sessions

We store a single session cookie (HttpOnly, Secure, SameSite=Strict). No advertising cookies or third-party tracking cookies are used. Sessions expire after one year or when you sign out.

6. Public data

Your display name, the tiles you own, and all historical pixel art associated with your account are publicly visible to anyone who visits earth.tattoo. Tile history is permanent and is not deleted when ownership changes hands.

7. Data retention

Account data is retained for as long as your account exists. Tile history is retained indefinitely (it is part of the permanent public record of the globe). You may request deletion of your account by emailing us; tile history entries will be anonymised rather than deleted.

8. Contact

For privacy questions or data requests, contact us at [email protected].