Privacy

Last updated 27 October 2026

Paint Weaver stores only what it needs to run your account. It has no adverts or analytics, and doesn't sell or share your data for marketing.

What's stored

If you browse without an account, nothing is stored about you, apart from the technical data below.

If you sign up:

• your email address, which you sign in with
• your password, stored only in a scrambled (hashed) form that can't be turned back into the password
• the name you choose to show, if you add one
• your collection, wishlist and favourite tutorials
• your preferences: brand, country and light or dark theme
• when you signed up

Cookies and technical data

• A session cookie keeps you signed in and remembers your theme. A security cookie protects forms from being sent from other sites, and a short-lived one carries one-off notices such as “Your password has been changed”. All are needed for the site to work, so there's no cookie banner.
• Your browser also remembers your theme itself (in local storage), so pages don't flash the wrong colours while loading.
• To stop password guessing and spam sign-ups, the number of attempts from each internet (IP) address is counted for up to an hour.
• When the site goes wrong, an error report is kept. It includes your account's id but not your email or IP address.

Who else handles it

• Render hosts the site and its database, in Frankfurt. Render passes requests through Cloudflare's network on their way in, so Cloudflare also sees your IP address.
• Resend sends the site's emails (verifying your address, resetting your password), so it sees your email address.
• Sentry stores the error reports described above.
• YouTube: tutorial pages show the video in YouTube's privacy-enhanced player and load thumbnails from YouTube, so YouTube sees your IP address. YouTube's own cookies are only set if you play a video, under Google's privacy policy.

How long it's kept

Your account and everything saved with it is kept until you delete it. Deleting it removes it straight away, though it may stay in database backups for a short while until they expire.

Your rights

• Change your name, preferences and password on your account page.
• Delete your account and everything saved with it from the account page.
• For a copy of your data, or any other privacy question, email privacy@paint.jamesweaver.dev.
• If you're unhappy with how your data is handled, you can complain to the Information Commissioner's Office.