Privacy

Painted Summit is run by [[ENTITY NEEDED]]. Write to support@painted.app with any question about your data, or to see, correct or delete it.

In the studio

The studio runs in your browser. When you search, your browser sends the words to Nominatim, run by the OpenStreetMap Foundation in the United Kingdom. When you pick a mountain, your browser asks the Overpass API at overpass-api.de, run by FOSSGIS e.V. in Germany, for its survey, and if that server is busy, VK Maps' public Overpass instance at maps.mail.ru, run by VK in Russia. It then fetches terrain tiles from Amazon Web Services (the AWS Terrain Tiles, in the United States). Each of them sees your IP address, your browser and the search or the area asked for. We see none of it.

Your GPX file

A GPX or TCX file you choose is read in your browser and never uploaded. The studio keeps the line it draws and, where the file had them, the times of its points, in this tab's session storage. If you order with that route, the line and its times go with the order, because the server draws the print again from them.

So that a trip to checkout and back doesn't lose your work, the studio also keeps the mountain's survey and your Expedition days in this tab's session storage, and your choices in the page's address. They stay on your device.

When you order

The studio sends our server the survey, your route, your choices and every word you typed for the print. The server draws the print and stores it, its preview and the survey in Vercel Blob (Vercel Inc., United States). Stripe (Stripe, Inc., United States) takes your payment and holds your name, email, shipping address and the order. The print file and your shipping address go to the printer that makes it: Prodigi (Prodigi Group Ltd, United Kingdom) or Printful (Printful Inc., United States). Our emails go through Resend (Plus Five Five, Inc., United States). Our site is hosted by Vercel, which keeps request logs.

Notes you send

The name, email and message you type into the expeditions or clubs forms are emailed to us through Resend and kept in our inbox for as long as the conversation needs.

Cookies and tracking

We set no cookies and run no advertising or analytics trackers. Stripe sets its own cookies on its checkout page; the cookies page says more.

How long

Stripe keeps the order record as the law on business records asks, typically seven years. Print files and previews stay in Blob so a damaged print can be made again. A year after an order, if you agreed at checkout, we send one note with a link back to the studio; we send nothing else.

Your rights

Wherever you live, you can ask us what we hold about you, have it corrected, or have it deleted where the law on business records allows. Residents of the EU, the UK and California have these rights in law, and may complain to their data protection authority.