Privacy Policy

This policy explains what information made.gallery (“we”, “us”) collects, how we use it, and the choices you have. made.gallery is a tool for artists and makers to document their work and share a personal gallery. By using the service you agree to this policy.

Information we collect

• Account information — your email address and display name, and an identifier from your sign-in method (a magic-link record or your Google account’s subject identifier). We do not store passwords.
• Content you create — the images, project details, journal entries, galleries, collections, materials and inventory you add, and any community posts or messages. You control what is published publicly.
• Payment information — if you subscribe, payments are processed by Stripe. We receive your subscription status and customer identifier; we never receive or store your full card details.
• Usage & device data — analytics events, pages viewed, approximate location (from IP), browser and device type, and diagnostic/error data, used to operate and improve the service and to detect abuse.
• Cookies & local storage — a strictly-necessary session cookie to keep you signed in, a cookie recording your analytics choice, and analytics cookies (only while analytics are enabled — see “Your choices”).

How we use information

• To provide, maintain, and secure the service and your account.
• To render your galleries and deliver features you request.
• To process subscriptions and send service emails (sign-in links, invitations, notices).
• To understand usage and improve the product.
• To detect, prevent, and respond to fraud, abuse, and security issues.
• To comply with legal obligations.

AI features

When you use an AI feature (for example, generating a description or caption), the relevant images and text you submit are sent to Google’s Gemini API to generate the result. If you configure your own AI provider key, your requests use that key instead. AI output can be inaccurate — review it before relying on it.

Service providers we share with

We share information only with providers that help us run the service, under contract:

• Google Cloud — hosting, database, and image storage.
• Cloudflare — content delivery, DNS, and security.
• Stripe — subscription payments.
• Google — Sign-In and the Gemini AI API.
• Resend — transactional email delivery.
• Ably — real-time messaging for community features.
• PostHog and Google Analytics — product and traffic analytics.
• Sentry — error and performance diagnostics.

We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and security of our users and the service.

Retention

We keep your information for as long as your account is active and as needed to provide the service. When you delete your account we delete or de-identify your personal information and content within a reasonable period, except where we must retain limited records (for example, for tax, accounting, or legal compliance).

Security

We protect information in transit with encryption, restrict access to credentials via a managed secret store, and follow least-privilege practices. No system is perfectly secure, but we work to protect your data and to respond quickly to issues.

International transfers

We are based in the United States and our providers may process data there and in other countries. Where required, we rely on appropriate safeguards for international transfers.

Your choices & rights

• Analytics — you can decline analytics from the consent banner; declining stops analytics capture on your device.
• Access, correction, deletion, and export — you can request a copy of your data, corrections, or deletion of your account and content by emailing us. We are adding self-serve account deletion and export in the product.
• Depending on where you live (e.g. the EEA/UK or California), you may have additional rights, including to object to or restrict certain processing. Contact us to exercise them.

Children

made.gallery is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

Changes

We may update this policy. We will change the “last updated” date above and, for material changes, provide additional notice.

Contact

Questions or requests: support@made.gallery.