Privacy Policy

This policy explains what personal information TattooBuild collects, why, who we share it with and the choices you have. It applies to tattoobuild.com, the TattooBuild design studio and our emails.

TattooBuild is operated by Tattoo Build ("TattooBuild", "we", "us"). If you have a question about your privacy or this policy, contact us at support@tattoobuild.com.

• Account details. Your name and email address and, if you sign in with Google, your Google profile name and photo. We use them to run your account, sign you in and contact you about it.
• Designs you email to yourself. If you ask us to email you a design, we send it to the address you give and keep a record of that address and when we sent it for 90 days, so the feature can't be used to send email to other people. We don't add that address to our newsletter unless you tick the box and then confirm it from the email.
• News and offers by email. We send these only if you tick the box when you sign up or turn them on in Account → Settings, or, if you have bought a plan from us, while it lasts and for up to two years after it ends. Every one of these emails has an unsubscribe link. We keep a record of when and how you agreed, as Canada's anti-spam law requires. Emails about your account, such as sign-in links and receipts, are separate and always sent.
• Your ideas and designs. The text you type into the studio, the options you choose (style, ink, placement) and the images the studio makes. We use them to create your designs and keep them in your gallery.
• Reference images and skin photos you upload. These are used only to make the design or skin mockup you asked for. We do not store the photo you upload. It is sent once to our image model provider (see "Service providers") to make the image, then discarded. The design or mockup that is created is saved to your gallery.
• Usage and limits. How many designs you have made, a cookie that remembers free designs for visitors who are not signed in, and a one-way hashed form of your IP address. We use these to apply free allowances and plan limits fairly and to prevent abuse. We never store your IP address in readable form.
• Payment information. Payments are handled by Stripe. We receive your subscription plan, status and billing country. We never see or store your full card number.
• Messages you send us through the contact or report forms, so we can reply and act on reports.
• Technical data such as pages requested, browser and device type, and server logs, to run, secure and fix the site.
• Analytics. We use Google Analytics to understand which pages are useful and how visitors find us. It uses cookies and collects information such as pages viewed, approximate location and device type. You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout.

We show advertising from Ezoic on our tattoo ideas and guides. Ezoic and its advertising partners may use cookies and similar technology to process information such as your IP address, browser and device, pages viewed and ad interactions to deliver and measure advertising. Where required, Ezoic's consent banner lets you accept, reject or manage these uses. We have disabled Ezoic's optional collection of email addresses and phone numbers from our forms. Read more about its data practices and choices at Ezoic's privacy policy.

We do not use your uploads or designs to train AI models, and our image model provider does not use data sent through its API to train its models.

New designs are private. Private designs are kept in access-controlled storage and are shown only to you when you are signed in. Our staff open a private design only when you ask us for help with it, or when the law requires it.

You can submit a design to our Explore gallery. We review every submission and choose which ones to publish. A published design appears in Explore on its own page, together with the idea you typed, so anything you wrote in it, such as a name or a date, becomes visible too. You can withdraw a submission, or make a published design private again, at any time, and its public copy is removed.

Designs made from a photo of you (skin mockups, and designs made from a photo you uploaded as the subject) can never be made public.

We use these companies to run TattooBuild. Each receives only what it needs to provide its service to us.

• OpenAI creates and edits designs. It receives your idea text, chosen options, and any reference images or skin photos for the request you make. Under its API terms it may keep inputs and outputs for up to 30 days for abuse monitoring.
• Stripe processes payments and runs the billing portal.
• Vercel hosts the site and stores design images.
• Neon hosts our database (accounts, gallery records and usage).
• Resend sends sign-in links, receipts and service emails.
• Google provides "Sign in with Google" and Google Analytics.
• Ezoic and its advertising partners serve and measure ads on our articles, and Ezoic's Gatekeeper consent platform manages advertising privacy choices.

Some of these providers store or process information outside Canada, mainly in the United States, where it may be accessible to authorities under the laws of that country.

• Essential: the sign-in session cookie, the guest cookie that tracks free designs, and Stripe's fraud-prevention cookies at checkout.
• Preferences: your light or dark theme and your unsent studio draft are kept in your browser's local storage, not on our servers.
• Analytics: Google Analytics cookies (see above).
• Advertising and consent: Ezoic and its partners use cookies and similar technology for advertising, measurement and remembering your privacy choices. Where required, use the consent banner on pages with ads to accept, reject or manage these uses.

• Account details and designs: until you delete them or close your account.
• Uploaded reference images and skin photos: not stored by us.
• Usage records: 13 months.
• Server logs: about 30 days.
• Payment and tax records: as long as tax law requires (currently up to 7 years).
• Contact and report messages: up to 2 years.

• View, download, make private or delete any of your designs from your gallery at any time.
• Stop news and offers at any time with the unsubscribe link in any of them, or in Account → Settings. We act on it within 10 days, usually straight away.
• Close your account from Account → Settings. This deletes your designs, gallery and usage records, except records we must keep by law.
• Ask us for access to, or correction of, the personal information we hold about you, or withdraw your consent, by emailing support@tattoobuild.com. We will respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

TattooBuild is for people aged 18 and over. Please don't upload photos of anyone under 18, or of other people without their permission.

We use encrypted connections, hashed passwords and IP addresses, and access controls on our systems and storage. If a breach creates a real risk of significant harm to you, we will notify you and the relevant regulators as the law requires.

We'll post changes on this page and update the date at the top. If a change is significant, we'll email account holders before it takes effect.

Tattoo Build. Email support@tattoobuild.com.