Privacy policy

What Infinite Tapestry collects, why, and who processes it. Last updated October 13, 2026.

What we collect

Google sign-in: your Google account email and the public handle you pick. We don't get your password or contacts.
Ideas and activity: the ideas and images you submit, votes, chat messages, and reports, linked to your handle (or a random guest handle).
Guests: a random handle, a signed cookie, and salted hashes of your network address and a few coarse browser traits, used only for limits and abuse prevention.
Analytics: privacy-friendly, cookieless page and performance analytics (Vercel Web Analytics and Speed Insights). No ad trackers, and we don't sell data.
Donations: Stripe handles payment details; we only see the amount, time and an optional note.

Why

To run the shared painting, show who suggested a scene, apply rate limits and moderation, and understand performance.

Processors

Supabase (database, sign-in, storage)
Vercel (website hosting, analytics)
Cloudflare (R2 image storage, Turnstile bot checks)
RunPod (the GPU that paints)
Google (sign-in), Stripe (donations), and an AI model provider that helps Auto plan scenes from public scene text

Retention and deletion

Painted scenes are part of the public canvas. To delete your account, handle and ideas, or to get a copy of your data, email TODO-contact@your-domain from the address you signed in with. We'll act within 30 days.