Privacy policy
Last updated October 15, 2026.
Pigfolio is a reference for oil paints. You can browse everything without an account and without being tracked. This page explains what we collect when you do sign in or post, why, who helps us run the site, and the choices you have.
Who is responsible
Pigfolio is run by [owner name: fill in src/lib/site.ts], [postal address: fill in src/lib/site.ts] ("we"). We are the data controller for the information described here. For anything about your data, email privacy@pigfolio.com.
What we collect and why
| Information | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Your email address, and your Google account's email, name and picture if you sign in with Google | To create your account and sign you in. Your email is never shown to other people. | Contract: providing the account you asked for |
| Your display name | Shown next to your reviews and photo credits | Contract |
| Reviews, ratings, photos, submissions and reports you post | To publish them, to improve the paint data, and to moderate the site | Contract; legitimate interest in keeping the site accurate and safe |
| Your saved palette | To keep your list of tubes in sync across devices when you're signed in | Contract |
| Technical request data (IP address, browser type, the page requested, time) | Our hosting providers process this to deliver pages, keep the site secure and stop abuse. We don't use it to profile you. | Legitimate interest in running a secure website |
We don't use analytics trackers, social media pixels or fingerprinting. Photos you upload are resized in your browser before upload, which also strips the location and camera details stored inside most phone photos.
Cookies and storage on your device
| Name | What it does | Type | How long |
|---|---|---|---|
sb-…-auth-token (cookie, sometimes split into parts) | Keeps you signed in. Only set when you sign in. | Strictly necessary | Until you sign out, refreshed while you use the site |
pigfolio:palette (browser storage) | Remembers the tubes you saved, on this device | Functional, set when you save a tube | Until you clear it or delete your account |
pigfolio:panel (browser storage) | Remembers whether you closed the details panel | Functional | Until you clear it |
Strictly necessary and functional storage doesn't need consent because it only does what you asked for. Pigfolio doesn't set any advertising or tracking cookies.
Links to stores
Some "Search" links on paint pages are affiliate links. If we join an affiliate program, clicking a store link may let the affiliate network and store set a cookie on their own websites to record that you came from Pigfolio. Nothing is set on Pigfolio itself, and we only receive totals of sales, never who bought what. See how Pigfolio earns money.
Advertising
Paint pages have one labeled sponsor space. Sponsors are shown as a plain link and image served from Pigfolio. They don't set cookies or learn anything about you unless you click through to their site.
Who helps us run Pigfolio
These providers process personal data for us, under data processing agreements that limit them to our instructions:
- Vercel Inc. (USA): hosting and delivering web pages
- Supabase Inc. (USA): database, sign-in and photo storage
- Resend (USA): sending sign-in emails
- Google: sign-in, only if you choose "Continue with Google"
We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We may disclose information if the law requires it, or to protect people's safety.
International transfers
Our providers store and process data in the United States. Where data from the EEA, UK or Switzerland goes to the US, the transfer is covered by the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or by the European Commission's Standard Contractual Clauses in the provider's data processing agreement.
How long we keep it
- Your account, profile and palette: until you delete your account.
- Reviews and photos: until you delete them or your account. If a moderator hides a review, it stays visible to you, and is deleted with your account.
- Submissions and reports: until you delete your account. Corrections we accept become part of the paint data, without your name.
- Backups: deleted data can remain in encrypted database backups for up to 7 days.
- Server logs: kept by our hosting providers for a short time, generally days, for security.
Your rights
Wherever you live, you can:
- Get a copy of your data: use Download my data on your account page.
- Correct it: change your name or edit your reviews at any time.
- Delete it: use Delete account on your account page. It removes everything at once.
Under the GDPR and UK GDPR you also have the right to restrict or object to processing based on legitimate interests, to data portability, and to withdraw consent at any time without affecting earlier processing. Residents of California and other US states with privacy laws have the right to know, delete, correct, and opt out of sale or sharing, and we won't treat you differently for using them. Email privacy@pigfolio.com for anything you can't do from your account; we reply within one month.
If you're unhappy with how we handled your data, please tell us first. You can also complain to your local data protection authority: in the EU, the authority in your country; in the UK, the Information Commissioner's Office (ico.org.uk).
Privacy choices
There's nothing to switch off: Pigfolio doesn't use advertising, analytics or tracking cookies. To remove the palette and panel settings from this device, clear this site's data in your browser settings.
Children
You must be 16 or older to create an account. Browsing doesn't require an account. If you believe a child under 16 has an account, email us and we'll delete it.
Security
Data is encrypted in transit (HTTPS) and at rest. Access rules in the database mean people can only change their own posts; moderators can hide posts but can't see your email address through the site.
Changes
If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, tell signed-in members on the site or by email before they take effect.