Privacy Policy

Information we collect

We collect information you provide when you use NailArt, including:

• Account details such as your email address and a password-derived hash and salt.
• Google sign-in details such as your verified email address and Google account identifier when you choose that option.
• Saved designs, profile preferences, display name, and your usual appointment details.
• Optional birth details, which are encrypted, and an optional reference photo stored in private media storage.
• Generator brief details, contact information, and messages you choose to submit.
• Subscription status and Stripe customer or subscription identifiers. We do not receive or store your full card number.

We also receive technical and usage information such as device and browser data, approximate location derived from an IP address, pages viewed, referral information, and interactions with site features.

How we use information

• Provide accounts, Google sign-in, saved designs, profiles, recommendations, and Pro features.
• Process subscriptions, maintain access entitlements, and send service or support messages.
• Respond to generator briefs, questions, security events, and operational problems.
• Measure site performance and product usage, prevent abuse, and improve NailArt.
• Comply with legal obligations and enforce our Terms of Service.

Cookies and analytics

NailArt uses essential cookies to keep you signed in and to protect the Google OAuth flow. We may also use Google Analytics, Microsoft Clarity, and our first-party growth measurement service to understand aggregated traffic and interactions. These services may use cookies or similar technologies. Our application events are designed not to include passwords, full prompts, private profile photos, or contact-form contents.

How information is shared

We share information only as needed to operate the service, including with:

• Cloudflare for hosting, database, private media storage, security, and transactional email delivery.
• Google for account authentication and, when enabled, analytics.
• Stripe for checkout, payment processing, fraud prevention, and subscription management.
• Microsoft Clarity for product analytics when that service is enabled.

We may also disclose information if required by law, to protect users or the service, or as part of a business transfer. We do not sell personal information or share it for cross-context behavioral advertising.

Retention and security

We retain information while your account is active and as reasonably needed to provide the service, resolve disputes, prevent fraud, and meet legal or accounting obligations. OAuth state records expire after about 10 minutes. Security measures include hashed credentials and sessions, encrypted optional birth details, private photo storage, HTTPS, and restricted production secrets. No system can guarantee absolute security.

Your choices and rights

You can choose not to provide optional profile information, sign out to end the active browser session, or contact us to request access, correction, deletion, or a copy of your personal information. You may also object to or restrict certain processing where applicable. We may need to verify your identity before completing a request, and legal retention requirements may limit deletion.

International users and children

Our providers may process information in countries other than your own, subject to their applicable safeguards. NailArt is not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe a child has provided information so we can investigate and remove it.

Policy changes

We may update this policy as NailArt or legal requirements change. We will post the revised policy here and update the effective date. Material changes may also be communicated through the site or by email when appropriate.