Privacy policy

Information we collect

We collect information you provide, product usage data, and necessary device information to operate and improve the service. If you sign in with Google, we receive your verified email address, display name, profile image, and Google account identifier. We never receive your Google password.

Analytics and cookies

Essential cookies support secure sign-in, sessions, and daily generation limits. With your consent, Google Analytics measures page views, feature usage, and general device information. We also send the SaaS Control Center random first-party visitor and session identifiers, path-only page visits, a two-letter country code, broad device and acquisition categories, the referring hostname, and optional UTM source and campaign values. This lets us measure visits and connect an anonymous visit to an account after sign-in without retaining a full referrer URL, raw IP address, browser user-agent, fingerprint, precise location, prompts, or generated tattoo content. When an authenticated visit is linked to an account, our hosting layer may separately provide its registration IP address and two-letter country code for account security, abuse prevention, and internal operations. Advertising storage and personalization are disabled by default. You may decline optional analytics in the cookie notice or change your choice from your profile at any time; choosing essential-only clears this first-party visitor information from your browser.

Your choices

Your profile provides a downloadable JSON export and self-service account deletion. Active subscriptions must be cancelled before deletion. You may also request access, correction, or deletion by contacting support@tattooideastudio.com.

Location and nearby search

We request your approximate device location only after you choose to search for nearby tattoo shops. The coordinates are sent to our server and Google Maps Platform to return nearby results; we do not store them in your account or database. Google processes this request under its Privacy Policy.

After deletion, we retain an irreversible account identifier for 90 days solely to prevent repeated welcome-credit abuse. It cannot be used to recover your email address or profile.

Marketplace, uploads, and payments

Artist applications, artwork submissions, and booking requests are stored so we can review content and make requested introductions. Submitted artwork is re-encoded to remove metadata and is checked by automated content-safety services before publication. We retain the resulting safety labels and cryptographic and perceptual fingerprints to document decisions, identify duplicate or previously rejected content, and handle appeals. A rejected image file is not retained; its safety evidence and fingerprints remain with your account until they are deleted under our retention practices or you delete your account.

Payment details are processed by Stripe; we do not store complete card numbers. Booking details are shared only with relevant artists when needed to respond to your request.