Privacy Policy

MadeThese is run by Riley Adamson, a person — not a company. He decides what happens with your data. Questions? Write to [email address coming soon].

When you sign in

• Your email address.
• Your name and profile picture, if the company you sign in with (like Google) shares them.
• The display name and color you pick on your profile.
• When you sign in by email: your email, the page you were on, a scrambled copy of the code we send, a scrambled (hashed) form of your IP address, and your browser’s name. We delete it after a day. We also count how many sign-in emails go to an address, for two hours, to stop spam.
• For each browser you stay signed in on: when it signed in and was last used, and the browser’s name (its “user agent”). Signing out removes it.
• If you choose to connect Instagram (for artists): your Instagram user ID, username, name, account type and picture, and the key Instagram gives us. We keep the key on our servers, so we can bring in your posts or post for you later — only when you ask. You can remove MadeThese in Instagram’s settings any time.

When you use the site

• What you post: comments, reactions, follows, suggested fixes to a piece’s details, and “I’m this model” requests.
• When you open a piece, we add one to that piece’s view count. We don’t record who opened it.
• Pieces you mark as posted to Instagram (if you’re the artist, or a model in them).

When you pay

• Stripe collects your card details. We never see or store your card number.
• We keep your wallet balance and its history, each tip (the piece, the amount and your note), and your memberships (the price, dates and status), plus the ID Stripe gives you as a customer.

When you join the waitlist

• Your email and the name you asked for.
• Which artist’s site sent you, if one did.
• A scrambled (hashed) version of your IP address — not the address itself — and your browser’s name and version (its “user agent”). These help us spot abuse.
• We use your email for one thing: to tell you when your studio is ready.

When you report a piece or ask us to delete your data

• What you wrote, your email if you give it, and your account if you’re signed in.
• A scrambled (hashed) version of your IP address and your browser’s user agent, to stop abuse.

Every visit

• Like every website, our servers see your IP address and browser with each request. Our host (Google Cloud) keeps these in server logs for about 30 days, to keep the site working and safe. We also hold your IP address in memory for a short time (a day at most) to limit spam.

If you’re an artist, we keep the files you upload and the details you or the AI helper add (titles, dates, materials, models and so on).

Photos often carry hidden info (called EXIF): when the photo was taken, the camera, which way is up, and sometimes where it was taken.

• Your original file is kept exactly as you uploaded it, hidden info included. It’s private: only you can see it, unless you choose to let people download originals.
• We read the date, the camera and which way is up, to help sort your work. We don’t use the location.
• Every picture we show visitors is a new copy with the hidden info removed — location included.

MadeThese has an AI helper that suggests details for an artist’s work — the paper, the pose length, the date written by the signature.

• To do that, we send OpenAI copies of the artist’s pictures (sometimes close-ups cut from the original file), plus the artist’s own word lists, like their paper names. If you give the helper a photo of your supplies or a product link, it sees those too.
• We send them only to help catalog that artist’s own work, and only when the artist uses the helper.
• OpenAI’s rules for businesses say it doesn’t train its models on what we send, and it deletes it after a short time (up to 30 days).
• What the helper learns from your corrections stays with your account, for you only. No other artist’s helper learns from your work. More on this: Your art is yours.

We also find pieces that look alike (like two photos of the same drawing) with a program that runs on our own servers. Your pictures don’t leave us for that.

These are all the cookies we use. Most are for signing in. None of them track you across other websites:

__session

Keeps you signed in, on madethese.com and every artist’s site, for up to 14 days. Only our server can read it.

__mt_device

Remembers this browser, so you stay signed in for up to 180 days without signing in again. Signing out removes it.

__mt_signin

Holds a sign-in by email while you wait for the email (20 minutes at most).

__mt_ig

Only while you sign in with Instagram (15 minutes at most), to make sure the answer comes back to you.

mt_in, mt_dev, mt_wait

Tiny notes (just “1”) that tell the page you’re signed in, that this browser is remembered, or that an email sign-in is waiting.

mt_gw

Remembers how wide a gallery was on your screen (just a number), so the first pictures load in the right shape. It lasts a year.

Your browser also keeps a few settings for you, on your device: light or dark mode, how you like a gallery laid out, the email you used for a sign-in link, and a tip note you haven’t sent yet. Artists’ browsers keep a copy of their Studio’s list, so it opens fast. None of this is sent to anyone else.

When you pay, you go to Stripe’s checkout page, and Stripe uses its own cookies there to stop fraud. When you sign in with Google or Instagram, their sign-in pages work the same way.

No ad cookies. No tracking pixels. No analytics companies.

We don’t sell your data, and we never share it for advertising. These companies help us run the site, and see only what they need to do their job:

• Google (Firebase and Google Cloud): hosting, sign-in, the database and file storage. Sign-in emails come from Google’s Firebase too.
• OpenAI: the AI helper, as described above.
• Stripe: payments, receipts and membership billing.
• Meta (Instagram): only if you sign in with Instagram.
• Cloudflare and Namecheap: our domain name, and forwarding email sent to us.

We’d also share data if the law requires it, or to protect someone’s safety. If we add a company to this list, we’ll update this page first.

• Your display name and picture, next to your comments and reactions, and on pieces you support if you choose “Show my name.”
• Tip amounts and tip notes are never public. Only the artist sees them.
• Artists choose who sees each piece: everyone, signed-in visitors, members, the model in it, or only themselves.
• The artist sees who reacted, commented, followed, tipped or joined.

• Your account and your art: until you delete them.
• Waitlist entries: until your studio opens, or until you ask us to remove you.
• Payment records: as long as tax and money laws require (often 7 years). Stripe keeps its own records too.
• A remembered browser: until you sign out, or 180 days after you last used it.
• An email sign-in that’s waiting: one day.
• An archive download you made: 7 days, then the files are deleted.
• Server logs: about 30 days.
• When something is deleted, copies in our backups are gone within about 30 days.

• See or fix: your profile is in your account menu. Artists can see and change everything in their Studio.
• Export: artists can download everything at once in the Studio — Settings → Your archive. You get every original as you uploaded it, plus a spreadsheet of every detail. The download links last 7 days; then we delete those files.
• Delete: delete your own comments any time. To delete your whole account and everything in it, see Delete your data.
• Ask: you can ask what we have about you, or ask us to stop using it, at [email address coming soon]. We’ll answer within 30 days.

Depending on where you live, you may have more rights. Write to us, and we’ll help — wherever you live.

MadeThese isn’t for children under 13. We don’t knowingly collect data from them. If you think a child under 13 has an account, tell us and we’ll delete it.

If we change what we collect or how we use it, we’ll update this page and the date at the top first. For a big change, we’ll put a notice on the site, and email you if we have your email.

Run by

Riley Adamson

Email

[email address coming soon]

Mail

[mailing address coming soon]