Privacy
What we keep, and why.
Last updated November 5, 2026.
What we collect
- Account data: username, email address, a hash of your password (never the password itself), and the dates you joined and were last active.
- Canvas activity: every pixel you place, with its coordinates, colour, time and the IP address it came from. Your username is shown publicly on pixels you placed and on the leaderboard.
- Payments: the pack you bought, amount, PayPal order/capture IDs and the email address PayPal reports for the payer. We never see or store card numbers.
- Technical logs: IP addresses and request logs on our web server, kept for 14 days for security and abuse prevention.
What we don't do
No advertising networks, no third-party analytics, no tracking pixels, no selling or sharing of personal data. The site loads nothing from other domains except PayPal's checkout, which only appears on the pages where you choose to buy something. PayPal processes the payment under its own privacy policy.
Cookies
A session cookie keeps you logged in, and an optional “remember me” cookie does so across visits. A small browser-storage flag remembers that you dismissed the welcome card. That's all.
We send transactional email only: verification links, password resets, purchase receipts and — for members who leave it switched on — alerts when someone paints over a saved blueprint (you can turn those off on your account page). All of it comes from our own mail server; there is no newsletter.
Reports
When you report an area of the canvas we store the area, the reason, your account (or your IP address if you are not logged in) and the time, so moderators can act on it and so the reporting tool can't be abused.
Your rights
You can delete your account yourself at any time from your account page: your username, email address, password and IP addresses are erased immediately, any membership is cancelled, and pixels you placed stay on the canvas as “[deleted]” because the artwork is shared. You can also write to support@pennycanvas.com to ask for a copy of your data or for deletion, and we will answer within 30 days. If you are in the EU/UK you may also complain to your data-protection authority.
Legal basis & retention
We process account and payment data to perform our contract with you, and activity logs for our legitimate interest in keeping the canvas abuse-free. Web-server logs are kept for 14 days. The IP address attached to a placed pixel is kept while the account exists (it is what lets us revert and ban vandals) and erased when the account is deleted. Payment records are kept without personal details for as long as tax law requires (typically 7 years). Database backups are kept for 14 days.