This policy explains what Play Painted collects when you browse studios, sign in, message a painter or claim a studio page, and what we do with it. Kiloforge, Inc. operates Play Painted.
Updated 13 November 2026
For privacy, access, correction or deletion requests, use Contact us at playpainted.com/contact and pick “Privacy or my data”. We may need to check that a request concerns your own account. Never email a sign-in code, card number or identity document.
We collect your email address, plus the name and email Google shares with us if you sign in with Google. We store the messages, quote requests and photos you send, the quotes you receive, and your saved items. Job pages hold dates, where your models are, progress photos and your approvals. A studio claim includes the studio, the studio email we send a code to, and the photo you add. If you use Contact us, we keep your email, your message and any page link you add, so we can reply. For security, sign-in records can include your IP address and browser details.
Studio pages use information each studio published on its own website and public profiles. A studio can ask us to correct or remove its page by email.
We use this information to sign you in, deliver your messages, show quotes and job pages, review studio claims, send the emails the site needs, answer support requests, and investigate errors or misuse. Don’t put personal or sensitive details in a message unless the painter needs them.
We store your messages and photos privately. Only you, the painter side of that conversation, and the Play Painted team can see them. If a studio hasn’t claimed its page yet, only you and we can see them until it does. We don’t sell your information, and sending a message doesn’t subscribe you to marketing.
Cloudflare hosts the site and provides our database, private file storage and email. Google provides optional sign-in, and Google Fonts receives ordinary browser requests when the site's fonts load. PostHog provides analytics, hosted in the US. Stripe processed card holds on the earlier version of the site; it handled card details, and we never stored them. Each provider has its own privacy policy.
Essential cookies keep you signed in. Browser storage can keep saved items and drafts on your device, so other people using the same browser profile may see them. Clearing browser site data removes those local drafts, not records saved to your account. We use PostHog by default for pseudonymous analytics of browsing and the quote flow: public page paths, campaign labels, studio and filter selections, pricing interactions, and steps in sending a message or quote request. Random visitor and session identifiers are stored on your device. We also record masked session replays on public browsing pages and on the forms for asking a studio a question or for a quote, to understand navigation and usability. Public page text and public portfolio images may appear in replays. Everything you type, including your message and email, appears only as hidden characters; photos you add are blocked, as are reflected search filters, error messages and nonvisual element attributes, and embedded content. Your messages and conversations, quotes, job pages, studio claim forms, sign-in, admin and payment screens are excluded. We don’t record browser console logs or network payloads. We honor browser Do Not Track and Global Privacy Control. You can turn analytics off with Privacy choices in the footer; opting out stops future analytics for that identifier and removes local analytics identifiers. We keep respecting earlier opt-outs, including choices made before analytics became default-on. An opt-out stays in this browser until you turn analytics back on or clear browser site data. Declining doesn’t change what you can do on the site. If you allow ad measurement in Privacy choices, we use the Meta Pixel on public browsing pages and Meta Conversions API for server-confirmed quote requests, painter questions and accepted quotes. Meta receives browser and ad-click identifiers and these limited events to attribute our ads. We do not send your email, name, message text, photos, private page URLs or payment details to Meta. Accepted quotes are reported separately from paid purchases. Ad measurement is off until you allow it. Declining ad measurement leaves browsing analytics unchanged. You can withdraw permission in Privacy choices; this stops future ad measurement and revokes queued events and later conversions for that consent identifier. Browser privacy signals and analytics opt-outs also disable ad measurement.
We keep account, message and job records to run the site and handle support. We delete messages written while signed out if they are still unconfirmed after 7 days. Messages sent to a studio that hasn't claimed its page stay with us until the studio claims it, or until you ask us to delete them. We keep records of card holds Stripe processed on the earlier site. To delete your account, ask us through Contact us; there is no automatic schedule yet. If a record must stay for security, payment or legal reasons, we’ll tell you which one and why. Our providers may process data outside your country. Depending on where you live, you may have more data rights, including the right to complain to a privacy regulator.
We email sign-in codes and updates about your messages, quotes and jobs. If an email doesn’t arrive, the site still shows the latest state, so check there and use Contact us if something is missing.
Questions? Contact the Play Painted team.