Privacy Policy

What Artnips collects

When you generate a painting, Artnips collects the following:

• A painting code and timestamp — stored in a database, publicly visible in the gallery.
• Your IP address, used for rate limiting (30 paintings per day). The IP is hashed with a server-side secret before storage and is never stored in plain text.
• A randomly generated visitor ID stored in a cookie. This is used to count returning visitors and will be linked to your account if you sign in later.

If you only browse without generating, no data beyond what Cloudflare logs is stored (see below).

Cookies

Artnips sets one cookie: visitor_id, a randomly generated UUID that persists for one year. It is used for rate limiting and basic analytics. It does not contain personal information and is not shared with any third party.

Rate limiting

To prevent abuse, each IP address is limited to 30 paintings per day. To enforce this, a one-way hash of your IP address is stored alongside a daily count. This hash is retained for 30 days and then no longer needed. It cannot be reversed to recover your IP without knowledge of a server-side secret.

Infrastructure

The service runs on Cloudflare Workers with a D1 database. Cloudflare logs request metadata (including IP addresses) according to their own policies. See Cloudflare's privacy policy for details.

Third parties

Google Fonts is loaded for typography. Google may log that request according to their own policies. No other third-party services receive data about visitors.

Contact

Questions? Reach out at amphro@gmail.com.