Privacy Policy
Last updated: February 2026
WarpaintVault ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.
1. Information We Collect
We collect information you provide directly: email address, username, avatar URL, and any content you upload (paintings, paint schemes). We also collect usage data such as pages visited and features used. When you authenticate via Google or Discord, we receive basic profile information (name, email, avatar) from those providers.
2. How We Use Your Information
We use your information to: provide and maintain the Platform; process subscriptions and payments; display your profile and content to other users; communicate with you about your account; improve the Platform and develop new features; ensure security and prevent abuse.
3. Data Sharing
We do not sell your personal data. We share information only with: Stripe (for payment processing — they handle all financial data under their own privacy policy); Supabase (our infrastructure provider, for authentication and data storage); law enforcement when required by law. We do not use third-party advertising services.
4. Cookies
We use essential cookies for authentication and session management. These are strictly necessary for the Platform to function. We do not use third-party tracking cookies. In the future, we may use analytics cookies (such as Vercel Analytics) to understand usage patterns — we will update this policy accordingly.
5. Data Storage & Security
Your data is hosted on EU-based servers through Supabase Cloud and Vercel. Images are stored on Supabase Storage. We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS) and at rest. However, no method of electronic storage is 100% secure.
6. Your Rights (GDPR)
As a user based in the EU, you have the right to: access your personal data; rectify inaccurate data; request deletion of your data; export your data in a portable format; withdraw consent at any time; lodge a complaint with a supervisory authority. To exercise these rights, contact us at privacy@warpaintvault.com.
7. Children's Privacy
The Platform is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data, we will promptly delete it.
8. Data Retention
We retain your data for as long as your account is active. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Anonymized, aggregated data may be retained for analytics purposes.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions or to exercise your data rights, contact us at privacy@warpaintvault.com. For general inquiries: contact@warpaintvault.com. WarpaintVault is operated from France and is subject to the General Data Protection Regulation (GDPR).