privacy
the short version: this site doesn't collect anything about you.
No accounts. No sign-up. No newsletter. No comments. No contact form. No adverts. No analytics. No tracking pixels, no Facebook pixel, no tracking cookies, nothing sold to anybody. This is a handful of plain web pages and some games, and that's genuinely all it is.
That's also why there's no cookie pop-up. There's nothing to ask you about.
Server logs
The site is hosted by Cloudflare. Like every web host on earth, their servers keep a short technical record of requests — your IP address, the time, which page was asked for, and what browser asked for it. That's the unavoidable plumbing of how the internet delivers a page to you, and it's used to keep the site up and to fend off attacks and abuse.
I don't get a copy of those logs, I don't analyse them, and I don't use them to build any picture of who's visiting. Under GDPR this rests on legitimate interest — keeping the site running and secure. Cloudflare handle it as my hosting provider, and they publish their own privacy policy.
Links to YouTube
There are links out to my YouTube channel. Following one takes you to YouTube, where Google's rules and Google's tracking apply, not mine. Nothing about you is passed along when you click — it's an ordinary link — but once you're there you're on Google's turf and their privacy policy is the one that counts.
Games
The games remember a few things in your own browser so they can pick up where you left off: whether you muted the sound, the achievements you've earned, your best times and your last few results. That lives in your browser's local storage, on your device. It never leaves your device, it isn't a cookie, and nothing in it says who you are. Clear the site's data in your browser, or use the "forget" link on a game's end screen, and it's gone.
When you finish a run of a game, the page sends that run's scores — how long it took, how many taps, and so on, with no name and no identifier attached — to the site's own counter, which keeps only running totals so the end screen can show you everyone's average. The pixel game also sends, when you leave its tab, how many minutes you played, under a random number made up for that visit so a later message about the same visit replaces the earlier one. That number is thrown away after 90 days, and nothing in any of this says who you are. That's the whole of it.
The commission form
The form on /commissions/ is the one place on this site where you type something in: your name, your e-mail address and what you'd like drawn. That goes to my e-mail, and a copy sits in the site's store for 90 days in case the e-mail goes astray, then it's dropped. It's used to answer you and to draw the picture, nothing else, and it's never passed on. Want it deleted sooner? Ask.
Paying for a commission happens on Gumroad, not on this site: Gumroad sells it to you on my behalf and handles the card. I only see your name, your e-mail address and the amount, never your card number. Gumroad keeps its own records of the payment, as the law requires; see Gumroad's privacy policy.
Ask me anything
The question box on the front page is anonymous. It asks for no name and no e-mail, and the site doesn't note who sent a question: only the words and the time. The question goes to my e-mail, a copy sits in the site's store for 90 days, then it's dropped. I may read it out or quote it in a video or a YouTube post, so don't put anything in it that says who you are.
Children
The site is fine for all ages, and since it collects nothing from anybody, it collects nothing from children either. No age gate is needed because there's no data to gate.
Your rights
Under the GDPR you have the right to see the personal data an organisation holds about you, to have it corrected or deleted, and to object to how it's used.
In practice the only personal data I could hold about you is what you sent through the commission form, and a record of your payment if you bought one. Anything else, there is nothing to show, correct or delete. You're welcome to ask anyway — write to hello@thepaintprof.com and you'll get a straight answer.
If you think this site has mishandled your data, you can complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY).
Who to contact
This website is run by the paint prof. The way to reach me about anything on this page is hello@thepaintprof.com.
If this page changes
If I ever add something that does collect data — a high-score board, a mailing list, anything at all — this page gets updated first, before the thing goes live. The date at the bottom tells you when it was last touched.
Last updated: 25 September 2026.