Privacy Policy

Last updated: June 2026

ArtStudy is built to be privacy-respecting. We collect as little as possible and never sell your data.

What we collect

If you sign in (optional): you can sign in with Google, Apple, X, or a one-time code sent to your email. We store the identifier the provider returns, your email where it is provided, and a display name and avatar where available — only to create your account and show your stats. You can play fully without signing in.

Gameplay stats: which painters you were shown, what you guessed, and whether it was correct. When you are signed in this is tied to your account so we can show your accuracy and favourite painter. When you are not signed in it is stored only against a random id kept in your browser (no name, email, or profile) and used purely for aggregate game analytics.

Leaderboards: if you submit a friend-battle or time-attack score, the display name you choose and that score are stored so they can appear on the relevant leaderboard.

Subscriptions: if you buy ArtStudy Premium, the payment is processed by Stripe. We never see or store your card details — we keep only your subscription status and a Stripe customer reference so we can unlock premium features.

Feedback: if you use the feedback button, we store your message and any contact detail you choose to add, so we can read it and reply.

Analytics: we use PostHog to understand how the site is used and to improve it. It records usage events (page views, country, device type, in-app actions like starting a game) and may capture anonymized session recordings of how the interface is used — sensitive inputs such as your email and one-time codes are masked and never recorded. PostHog stores identifiers in your browser and processes this data on servers in the United States; see the PostHog privacy policy.

Cookies

A single session cookie, set only after you sign in, keeps you logged in (plus a short-lived cookie used during the sign-in handshake). Our analytics provider PostHog also stores identifiers in your browser to measure usage and link session recordings. We show no ads and set no advertising cookies.

Where data lives

Account, stats, leaderboard, and feedback data are stored in a private database on our server. Payments are handled by Stripe; email sign-in codes are sent through MailerSend. Usage analytics and session recordings are processed by PostHog on servers in the United States. Painting images load directly from museum and Wikimedia servers in your browser.

Your choices

You can play without an account and sign out at any time. To permanently delete your account and all associated data, sign in, open the menu under your avatar (top-right corner) and choose Delete account — the removal is immediate and irreversible. For any other privacy question, use the feedback button in the bottom-right corner of any page.