Privacy Policy

MadeThese is run by Riley Adamson, a person — not a company. He decides what happens with your data. Questions? Write to [email address coming soon].

When you sign in

• Your email address. We use it to sign you in, to find your place on the waitlist (or your invite) if you joined with the same email, for receipts when you pay, to answer you, and for the emails you choose — when someone tips you, comments on your pieces or asks you something, and new pieces you’re in. You choose right away, once a day or not at all for each (Your account → Emails, or the link at the bottom of every email); for that we keep your choices and when we last emailed you. If you ask to be linked as the model in an artist’s pieces, that artist sees it too (see “What other people can see”). We never sell it, and never use it for ads.
• Your name and profile picture, if the company you sign in with (like Google) shares them.
• The display name and color you pick on your profile.
• When you sign in by email: your email, the page you were on, a scrambled copy of the code we send, a scrambled (hashed) form of your IP address, and your browser’s name. We delete it after a day. We also count how many sign-in emails go to an address, for two hours, to stop spam.
• For each browser you stay signed in on: when it signed in and was last used, and the browser’s name (its “user agent”). Signing out removes it. You can see them, and sign any of them out, on Your account.
• If you choose to connect Instagram (for artists): your Instagram user ID, username, name, account type, picture, follower and post counts, and the key Instagram gives us. We keep the key on our servers, so we can bring in your posts or post for you later — only when you ask. You can remove MadeThese in Instagram’s settings any time.

When you use the site

• What you post: comments, reactions, follows, suggested fixes to a piece’s details, and “I’m this model” requests.
• When you open a piece, we add one to that piece’s view count. We don’t record who opened it.
• When you open an artist’s site from a link MadeThese made for them (like their QR code or their Instagram bio), we add one to that day’s count for that link, so the artist knows where visitors come from. We don’t record who you are.
• Pieces you mark as posted to Instagram (if you’re the artist, or a model in them).

When you pay

• Stripe collects your card details. We never see or store your card number.
• We give Stripe your email, so it can send your receipts.
• We keep your wallet balance and its history (what you added, spent and earned), each tip (the artist, collection or piece, the amount and your note), each collection you unlocked (and its price), and your memberships (the price, dates and status), plus the ID Stripe gives you as a customer.

When you get paid (artists)

• To cash out, you set up payouts on Stripe’s own page. Stripe collects your name, date of birth, address, tax ID and bank details, as the law asks of anyone it pays. We never see your bank details or tax ID.
• We keep the ID of your Stripe account, whether it’s ready to pay you, and a record of each tip and unlock, MadeThese’s share and each cash-out.

When you join the waitlist

• Your email and the address you asked for.
• If you tell us: your name, what you make, and your Instagram or a link. We read them to decide who’s next.
• If you connect Instagram while you’re on the list: its username and follower count, and when we read them.
• Which artist’s site sent you, if one did.
• A scrambled (hashed) version of your IP address — not the address itself — and your browser’s name and version (its “user agent”). These help us spot abuse.
• We use your email to tell you when it’s your turn, and to show your place in line when you sign in with the same email.

When you report a piece or ask us to delete your data

• What you wrote, your email if you give it, and your account if you’re signed in.
• A scrambled (hashed) version of your IP address and your browser’s user agent, to stop abuse.

When you use Help

• The Help chat (signed in only) sends your messages, the page you’re on and your name to OpenAI to write its answer. The conversation is kept in your browser, not on our servers.
• When you tell it about a problem, an idea or a question it couldn’t answer, it saves that for Riley to fix or answer: a short summary, the conversation so far, the page, your browser and screen size, and your account. You’ll find it in Download my data; if you delete your account, the problem stays on the list without your name, email or the conversation.
• We count how many Help messages you send each day, to keep it fair.

Every visit

• Like every website, our servers see your IP address and browser with each request. Our host (Google Cloud) keeps these in server logs for about 30 days, to keep the site working and safe. To limit spam we also count requests from your IP address for a short time: in memory, and as a scrambled (hashed) counter in our database that deletes itself within two days.

If you’re an artist, we keep the files you upload and the details you or the AI helper add (titles, dates, materials, models and so on).

Photos often carry hidden info (called EXIF): when the photo was taken, the camera, which way is up, and sometimes where it was taken.

• Your original file is kept exactly as you uploaded it, hidden info included. It’s private: only you can see it, unless you choose to let people download originals.
• We read the date, the camera and which way is up, to help sort your art. We don’t use the location.
• Every picture we show visitors is a new copy with the hidden info removed — location included.

MadeThese has an AI helper that suggests details for an artist’s pieces — the paper, the pose length, the date written by the signature.

• To do that, we send OpenAI copies of the artist’s pictures (sometimes close-ups cut from the original file), plus the artist’s own word lists, like their paper names. If you give the helper a photo of your supplies or a product link, it sees those too.
• We send them only to help catalog that artist’s own pieces, and only when the artist uses the helper.
• OpenAI’s rules for businesses say it doesn’t train its models on what we send, and it deletes it after a short time (up to 30 days).
• What the helper learns from your corrections stays with your account, for you only. No other artist’s helper learns from your art. More on this: Your art is yours.

We also find pieces that look alike (like two photos of the same drawing) with a program that runs on our own servers. Your pictures don’t leave us for that.

These are all the cookies we use. Most are for signing in. None of them track you across other websites:

__session

Keeps you signed in, on madethese.com and every artist’s site, for up to 14 days. Only our server can read it.

__mt_device

Remembers this browser, so you stay signed in for up to 180 days without signing in again. Signing out removes it.

__mt_signin

Holds a sign-in by email while you wait for the email (60 minutes at most).

__mt_ig

Only while you sign in with Instagram (15 minutes at most), to make sure the answer comes back to you.

mt_in, mt_dev, mt_wait

Tiny notes (just “1”) that tell the page you’re signed in, that this browser is remembered, or that an email sign-in is waiting.

mt_gw

Remembers how wide a gallery was on your screen (just a number), so the first pictures load in the right shape. It lasts a year.

Your browser also keeps a few settings for you, on your device: light or dark mode, how you like a gallery laid out, the email you used for a sign-in link, a tip note you haven’t sent yet, and an Instagram post you’re still putting together. Artists’ browsers keep a copy of their Studio’s list, so it opens fast. None of this is sent to anyone else.

When you pay, you go to Stripe’s checkout page, and Stripe uses its own cookies there to stop fraud. When you sign in with Google or Instagram, their sign-in pages work the same way.

When you ask for a sign-in email, join the waitlist, report a piece or post your first comment, a small check from Cloudflare Turnstile makes sure you’re a person and not a robot. Usually you see nothing; sometimes it asks you to tap a box. To do that check, Cloudflare sees your IP address and some details about your browser, in its own frame. It’s used only to stop bots, not to track you.

No ad cookies. No tracking pixels. No analytics companies.

We don’t sell your data, and we never share it for advertising. These companies help us run the site, and see only what they need to do their job:

• Google (Firebase and Google Cloud): hosting, sign-in, the database and file storage. When our own sign-in email can’t go out, Google’s Firebase sends it instead.
• OpenAI: the AI helper, and the Help chat’s answers, as described above.
• Resend: sends our emails — it sees who each one goes to and what it says. Our emails have no tracking pixels and no tracked links.
• Stripe: payments, receipts, membership billing, and paying artists (Stripe Connect).
• Meta (Instagram): only if you sign in with Instagram.
• Cloudflare and Namecheap: our domain name, and forwarding email sent to us. Cloudflare’s Turnstile also checks that sign-ins, waitlist names, reports and first comments come from people (see Cookies above).

We’d also share data if the law requires it, or to protect someone’s safety. If we add a company to this list, we’ll update this page first.

• Your display name and picture, next to your comments and reactions, and on pieces you support if you choose “Show my name.”
• Tip amounts and tip notes are never public. Only the artist sees them.
• Artists choose who sees each piece: everyone, signed-in visitors, members, people who unlock a collection, the model in it, or only themselves.
• The artist sees who reacted, commented, followed, tipped, unlocked a collection or joined.
• If you ask to be linked as the model in an artist’s pieces (or open their invite), that artist sees your name and the email you sign in with, so they can recognize you.

• Your account and your art: until you delete them.
• Waitlist entries: until your studio opens, or until you ask us to remove you.
• Payment records: as long as tax and money laws require (often 7 years). Stripe keeps its own records too.
• A remembered browser: until you sign out, or 180 days after you last used it.
• An email sign-in that’s waiting: one day.
• An archive download you made: 7 days, then the files are deleted.
• Server logs: about 30 days.
• When something is deleted, copies in our backups are gone within about 30 days.
• When you delete your account, we keep a note that an account was deleted (no name, no email), so a late payment message can’t bring it back.

• See or fix: your name and color, how you sign in and where you’re signed in are on Your account (in your account menu). Artists can see and change everything in their Studio.
• Export: anyone can download their account’s data as one file — Your account → Download my data: your profile, follows, reactions, comments, tips, unlocks, wallet, memberships, model links and privacy choices. Artists can also download all their art at once in the Studio — Settings → Your archive. You get every original as you uploaded it, plus a spreadsheet of every detail. The download links last 7 days; then we delete those files.
• Delete: delete your own comments any time. To delete your whole account and everything in it, go to Your account → Delete my account. More on what goes and what stays: Delete your data.
• Ask: you can ask what we have about you, or ask us to stop using it, at [email address coming soon]. We’ll answer within 30 days.

Depending on where you live, you may have more rights. Write to us, and we’ll help — wherever you live.

MadeThese isn’t for children under 13. We don’t knowingly collect data from them. If you think a child under 13 has an account, tell us and we’ll delete it.

If we change what we collect or how we use it, we’ll update this page and the date at the top first. For a big change, we’ll put a notice on the site, and email you if we have your email.

Run by

Riley Adamson

Email

[email address coming soon]