Privacy policy
Last updated October 17, 2026.
Pigfolio is a reference for oil paints. You can browse everything without an account and without being tracked. This page explains what we collect when you do sign in or post, why, who helps us run the site, and the choices you have.
Who is responsible
Pigfolio is run by Kerfuffle Connection, 4400 West Riverside Drive, Burbank, CA 91505 ("we"). We are the data controller for the information described here. For anything about your data, email privacy@pigfolio.com.
What we collect and why
| Information | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Your email address and password, and your Google account's email, name and picture if you sign in with Google | To create your account and sign you in, and to email you sign-in and password-reset links you ask for. Your email is never shown to other people. Your password is stored only as a one-way scrambled form (a hash) by our sign-in provider; nobody at Pigfolio can see it. When you create an account we also record that you confirmed you're 16 or older. | Contract: providing the account you asked for |
| Your display name and profile address | Shown next to your reviews and photo credits, and on your public profile page (pigfolio.com/u/your-address), which also shows the month you joined, your named reviews and any collections you make public. Other painters can find your profile by searching your name. Search engines are only asked to list a profile once it has 3 or more reviews. | Contract |
| Optional profile details: a picture, a short bio, a location, links and a profile color | Shown on your profile, and your picture next to your named reviews, only if you add them. Pictures are cropped and re-encoded on your device before upload, which removes location and camera details. Share only as much location as you're comfortable with. | Consent: you choose to add them, and can remove them at any time |
| Your privacy choices: a private account, and reviews you post anonymously | A private account has no public profile, doesn't appear in painter search, can't share collections, and all its reviews are anonymous. An anonymous review counts toward the paint's rating and is shown without your name, picture or profile, and its photos aren't shown to others. Moderators can still see who wrote it, to deal with spam and abuse. | Contract |
| Reviews, ratings, photos, submissions and reports you post, and each photo's size, dimensions, file fingerprint and optional description | To publish them, to improve the paint data, and to moderate the site. Photos are resized and re-encoded on your device before upload, which removes location, camera and date details. The fingerprint helps spot duplicate uploads. | Contract; legitimate interest in keeping the site accurate and safe |
| Messages between you and the moderators, any mute or ban on your account with its reason, and your notifications (such as how many people found a review helpful) | To moderate the site and to tell you about activity on your reviews. Moderators see which moderator wrote each message; you see them as from the moderators. Who voted a review helpful is never shown to anyone. | Legitimate interest in keeping the site safe; contract |
| Articles you write for Learn (if you're a contributor), with notes between you and the moderators and a history of versions | To review and publish them. Published articles show your display name and profile link as the author, and the reviewing moderator's as reviewer. Drafts, notes and history are seen only by you and the moderators. | Contract |
| Feedback you send as a beta tester: your message, the page you were on, a screenshot of what was on your screen (if you include it) with anything you drew on it, and your screen size, browser and light or dark mode | To find and fix problems before launch. Only admins see it. The screenshot is taken in your browser only when you press Feedback, and shows only Pigfolio; you can cover anything private with the Hide tool, or leave the screenshot out. When an admin marks your feedback planned or fixed, you get a notification. | Consent: you choose to send it |
| Reviews you mark as helpful | To count how many painters found each review helpful. Only the count is shown; nobody else, including the review's author, can see who voted. | Contract |
| Your collections | To keep your collections in sync across devices when you're signed in. They're private unless you make one public: then anyone with its link can see it with your name, and it's listed on your profile. | Contract |
| Searches that found nothing | When a search finds nothing at all, we count the words searched, so we can add missing paints and teach search new spellings. We keep only the words, how often and when they were last searched, never who searched or anything about you, and skip anything that looks like an email address or a long number. | Legitimate interest in improving the site |
| Technical request data (IP address, browser type, the page requested, time) | Our hosting providers process this to deliver pages, keep the site secure and stop abuse. We don't use it to profile you. | Legitimate interest in running a secure website |
We don't use analytics trackers, social media pixels or fingerprinting. Photos you upload are resized in your browser before upload, which also strips the location and camera details stored inside most phone photos.
Cookies and storage on your device
| Name | What it does | Type | How long |
|---|---|---|---|
sb-…-auth-token (cookie, sometimes split into parts) | Keeps you signed in. Only set when you sign in. | Strictly necessary | Until you sign out, refreshed while you use the site |
pigfolio:collections (browser storage) | Remembers your collections, on this device | Functional, set when you save a paint | Until you clear it or delete your account |
pigfolio:panel (browser storage) | Remembers whether you closed the details panel | Functional | Until you clear it |
Strictly necessary and functional storage doesn't need consent because it only does what you asked for. Pigfolio doesn't set any advertising or tracking cookies.
Links to stores
Some "Search" links on paint pages are affiliate links. If we join an affiliate program, clicking a store link may let the affiliate network and store set a cookie on their own websites to record that you came from Pigfolio. Nothing is set on Pigfolio itself, and we only receive totals of sales, never who bought what. See how Pigfolio earns money.
Advertising
Paint pages have one labeled sponsor space. Sponsors are shown as a plain link and image served from Pigfolio. They don't set cookies or learn anything about you unless you click through to their site.
Who helps us run Pigfolio
These providers process personal data for us, under data processing agreements that limit them to our instructions:
- Vercel Inc. (USA): hosting and delivering web pages
- Supabase Inc. (USA): database, sign-in and photo storage
- Resend (USA): sending sign-in emails
- Google: sign-in, only if you choose "Continue with Google"
We don't sell your personal information, and we don't share it for cross-context behavioral advertising. We may disclose information if the law requires it, or to protect people's safety.
International transfers
Our providers store and process data in the United States. Where data from the EEA, UK or Switzerland goes to the US, the transfer is covered by the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or by the European Commission's Standard Contractual Clauses in the provider's data processing agreement.
How long we keep it
- Your account, profile, collections and helpful votes: until you delete them or your account. Making a collection private again takes its page down straight away.
- Reviews and photos: until you delete them or your account. If a moderator hides a review, it stays visible to you, and is deleted with your account.
- Mod mail, notifications and the record of any mute or ban: until you delete your account.
- Beta feedback and its screenshots: until an admin deletes it or you delete your account.
- Submissions and reports: until you delete your account. Corrections we accept become part of the paint data, without your name.
- Backups: deleted data can remain in encrypted database backups for up to 7 days.
- Unsuccessful searches: 90 days after they were last searched.
- Server logs: kept by our hosting providers for a short time, generally days, for security.
Your rights
Wherever you live, you can:
- Get a copy of your data: use Download my data on your account page.
- Correct it: change or remove anything on your profile, edit your reviews or post them anonymously, make a collection private, or make your whole account private, at any time.
- Delete it: use Delete account on your account page. It removes everything at once.
Under the GDPR and UK GDPR you also have the right to restrict or object to processing based on legitimate interests, to data portability, and to withdraw consent at any time without affecting earlier processing. Residents of California and other US states with privacy laws have the right to know, delete, correct, and opt out of sale or sharing, and we won't treat you differently for using them. Email privacy@pigfolio.com for anything you can't do from your account; we reply within one month.
If you're unhappy with how we handled your data, please tell us first. You can also complain to your local data protection authority: in the EU, the authority in your country; in the UK, the Information Commissioner's Office (ico.org.uk).
Privacy choices
There's nothing to switch off: Pigfolio doesn't use advertising, analytics or tracking cookies. To remove your collections and panel settings from this device, clear this site's data in your browser settings.
Children
You must be 16 or older to create an account. Browsing doesn't require an account. If you believe a child under 16 has an account, email us and we'll delete it.
Security
Data is encrypted in transit (HTTPS) and at rest. Access rules in the database mean people can only change their own posts; moderators can hide posts but can't see your email address through the site.
Changes
If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, tell signed-in members on the site or by email before they take effect.