Legal
Privacy Policy
Last updated: April 2025 · We only collect what we need. We never sell your data.
Short version: We collect your alias, country, message, and pixel data to run the artwork. Payments go through Stripe — we never see your card. You can anonymize your personal details at any time. We don't run ads and we don't sell your data.
1. What we collect
We collect only what is necessary to operate the project:
Payment information — processed exclusively by Stripe, Inc. We never see or store your full card number, expiry, or CVV. We receive only a confirmation token and the amount paid.
Contribution data — your chosen alias, country, pixel coordinates, pixel color, and dedication message. This data forms the permanent record of your contribution to the artwork.
Session data — a temporary session token so you can access your contribution after purchase. This expires when you close your browser unless you create an account.
Analytics — anonymized page view counts and general geographic region (not precise location). We use privacy-respecting analytics that do not fingerprint individual users or share data with advertising networks.
2. How we use it
Contribution data is used to:
— Display your pixel on the live canvas
— Show your dedication message to other visitors (if public)
— Generate your certificate of contribution
— Count toward your country's ranking
— Potentially display in physical or digital exhibitions (if you have not opted out)
We do not use your data for advertising, profiling, or sale to third parties. Ever.
3. What is public
By default, when you purchase a pixel, the following are public:
— Your chosen alias
— Your country (if provided)
— Your pixel color and coordinates
— Your dedication message (if set to Public)
You can change your message to Private at any time from your profile. Private messages are still part of the artwork's internal record but are not displayed to visitors.
Museum display can also be opted out per-dedication in your settings.
4. Data retention
Contribution records are retained permanently — they are part of the artwork. We cannot delete your pixel's coordinates or color once confirmed, because that would alter the artwork.
If you request deletion of your personal data (alias, message, country), we will anonymize your contribution: the pixel will remain but be attributed to "Anonymous" with no message. The coordinates and color cannot be deleted.
To request anonymization, contact: privacy@thehumancanvas.art
5. Cookies
We use one session cookie to maintain your contribution session after purchase. We do not use third-party tracking cookies, advertising cookies, or persistent fingerprinting.
Stripe may set its own cookies during payment processing, governed by Stripe's Privacy Policy.
6. Third parties
Stripe, Inc. — payment processing. Subject to Stripe's Privacy Policy.
Hosting provider — server infrastructure. Data is processed in the EU/US. We select providers with appropriate data processing agreements.
We do not use: Google Analytics, Meta Pixel, TikTok Pixel, or any advertising network trackers.
7. Your rights
Depending on your jurisdiction, you may have rights to:
— Access the data we hold about you
— Correct inaccurate data
— Request anonymization of your personal details (see Section 4)
— Object to certain uses of your data
— Lodge a complaint with a supervisory authority
To exercise these rights: privacy@thehumancanvas.art
8. Children
The Human Canvas is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has made a purchase, contact us and we will handle it in accordance with applicable law.
9. Changes
We may update this policy. Changes will be posted here with the updated date. Significant changes will be announced on the platform.
Last updated: April 2025