Privacy

• We hold your email address, whatever you choose to put on your profile, and which open calls you saved.
• We do not run analytics, we set no tracking cookies, and we have no advertising of any kind.
• We never sell your data and we never pass your address to anyone but the services listed below that we need to run the product.
• You can delete your account yourself, from your profile page, and it takes effect at once. If you cannot sign in, email hello@artping.io and we delete everything we hold about you within 7 days.

The whole list. Not a category summary — the actual contents of the database, in the order you would encounter them.

• Your email address, the note about your practice if you wrote one, and a one-way hash of the IP address the request came from.

  To decide who to let into the pilot and to email you when a place opens up. The hash is only used to stop one script filling the form a thousand times — it is a fingerprint, and it cannot be turned back into an IP address.

  Kept Until you delete your account, or ask us to. We keep requests we have already decided on so we do not ask you the same question twice.

• Your email address, on the list of people allowed to sign in.

  It is the access check itself. When you sign in, we compare the address Google gives us against this list and let you in or not.

  Kept Until your access ends, or you delete your account.

• Whatever you choose to put on your profile: a display name, mediums, the kinds of opportunity you are after, career stage, country, birth year, whether you work as a collective, a fee ceiling, a website, an Instagram handle, a short bio, and whether you want email from us. The same record also notes whether you have dismissed the welcome message, so we do not keep showing it to you.

  To match open calls to you rather than showing you all of them. Every field is optional and every one starts empty — a blank profile is a working account.

  Kept Until you clear it or delete your account. You can edit or empty any field yourself on the profile page, and the delete button is on that page too.

• Which open calls you saved, and when you saved them.

  It is what your Planner shows you. Nothing else reads it.

  Kept Until you unsave them or delete your account.

• The date you last signed in, and how many times you have signed in.

  So we can tell whether an invitation was actually used. Sessions last 24 hours, so the count reads as the number of days you have used Art Ping. It is not page-by-page tracking — there is no page-by-page tracking here to do it with.

  Kept Until you delete your account.

• A sign-in cookie, set when you sign in with Google. It holds your email address, your name and your profile picture URL as Google gave them to us, signed so it cannot be edited. The sign-in exchange itself sets two short-lived cookies alongside it, which is how the browser that started a sign-in is the one that finishes it.

  It is what keeps you signed in between pages. It is strictly necessary: without it there is no way to know the browser asking for a page is yours. Your name and picture stay in this cookie and are never written to our database.

  Kept 24 hours, then it expires and you sign in again. Signing out deletes it immediately; the two sign-in cookies last minutes.

• Ordinary server logs — the requests our host serves, including IP addresses and browser user agents.

  Every web server keeps these; ours is Google Cloud and we have not turned them off. We do not build anything on them, and the error reports we do read are deliberately stripped of email addresses and IPs before they are recorded.

  Kept About 30 days, by the hosting platform's default. We do not extend it.

• No analytics, no tracking pixels, no session recording. We genuinely cannot tell you which pages you visited, because nothing records it — the only cookies this site sets are the ones signing in requires.
• No advertising, no ad networks, no profiling for advertisers.
• No selling, renting or sharing your address. No newsletter unless you tick the box on your profile, and unticking it stops it.
• No third-party scripts or fonts, and no embed that loads on its own. Typefaces are served from this site rather than from Google Fonts, and there is no chat widget, no embedded player and no social button anywhere. (Listing pictures, and a map if you ask for one — see below.)
• No email addresses or IP addresses in our error reports. When something fails we record the error and, at most, the domain part of an address — “@gmail.com”, never the address itself.

Two things, and only one of them happens without you asking.

Listing pictures. We do not copy organizers' pictures onto our servers. Each listing shows the image from the organizer's or gallery's own website, the way a link preview does — so while a listing is on your screen, your browser is fetching that picture straight from their server, and their server sees your IP address, as it would if you had visited the site.

They do not see which page of Art Ping you were on — we send a referrer policy that withholds it — and none of our cookies travel with the request. We link rather than re-host because re-hosting other people's photographs is a copyright decision we have not made.

The map. Galleries and open calls with an address offer a Google map of it. It is off until you press “Show map”: before that, nothing on the page has been requested from Google, and the address and its two links are ours. Press it and your browser loads the map from Google, which sees your IP address and may set its own cookies, under Google's privacy policy rather than this one. We remember the answer in your browser so it is one press rather than one per listing, and “Hide map” takes it back — that preference stays on your device and never reaches us.

Nobody outside Art Ping reads your data. Four companies handle it because we run on their infrastructure, and each is bound by its own contract with us:

• Google — Signs you in. Google tells us the email address on the account and whether it is verified; we never see your password. Google's own privacy policy covers what Google does with the sign-in.
• Google Cloud (Firebase App Hosting) — Runs the app and stores its logs, on servers in the United States.
• MongoDB Atlas — Hosts the database everything above is stored in.
• Resend — Delivers the few emails we send — your invitation, and a note if your access ends. Only your address and the message itself reach it.

The app runs on servers in the United States, so if you are in the EU or the UK your data is transferred there. We rely on the standard contractual clauses these providers offer for that transfer.

Under the GDPR and the UK GDPR, three different grounds cover the three different things above.

• Your request and your access. We hold your address because you asked us to let you in, and because checking it is how sign-in works. That is a contract you entered by asking for access, and our legitimate interest in running an invite-only pilot without it being flooded.
• Your profile and your saves. We hold these to provide the thing you signed in for. You can empty both yourself at any time.
• Email about deadlines. Consent, and only consent. It is off unless you turn it on, and turning it off stops it — no re-consent, no win-back message.

• Your access. You will be signed out, and signing in again will not let you back in.
• Your profile, including everything you told us about your practice.
• Every open call you saved, and your Planner with them.
• The record of when and how often you signed in.
• The request you made to be let in, and the note you wrote with it.

If you cannot sign in — you have lost the Google account, or you are asking on someone else's behalf — write to hello@artping.io instead. We run that one by hand and finish it within 7 days.

Short of deleting everything, you can edit or empty every profile field yourself, unsave any call, and sign out — which deletes the sign-in cookie immediately; it expires on its own after 24 hours in any case.

If you are in the EU or the UK you also have the right to ask what we hold (this page is most of the answer), to have it corrected, to object to our holding it, to get a copy in a portable form, and to complain to your national data protection authority. Ask us at the same address; we would rather hear from you first, but the last one does not need our agreement.

Art Ping is invite-only, and we invite adult artists. We do not knowingly hold data about children. If you think a child has an account here, write to us and we will delete it without asking you to prove anything.

If we start collecting something new, this page changes before the code ships, and the date at the top moves. If the change is one you would care about — a new kind of data, or a new company touching it — we will email you rather than quietly editing the page.

Art Ping is the controller of the data described here. A real person reads hello@artping.io and answers within a few days. See also our terms.