Privacy
Last updated 30 August 2026
There is no account here, so there is not much to collect. This says exactly what there is, why, and who else sees it.
What is collected
Your email address. Given at checkout or when reserving a block. It is how we send the receipt, the confirmation, and anything about the order afterwards.
What you put on the board. Brand name, link, tagline, colour and logo. This is published — that is the point of buying a square.
Your IP address and browser user agent. Recorded with each order, reservation and screening decision.
A session cookie. A random identifier, stored for a year, so the brands you created appear in your own “reuse a brand” list. It is not an account, holds no personal data, and is not used for tracking or advertising.
A payment reference. An identifier from the payment provider. Card numbers are never sent to this site and are never stored here.
Why
The email, to deliver the order and reach you about it. The published fields, to display your block. The payment reference, to issue a refund if one is owed.
The address and user agent for a narrower purpose: stopping abuse and answering for it. They cap how much of a canvas one person can hold without paying, and they are what identifies a submission if something illegal is put on the board or a payment is disputed. They are not used for analytics or profiling.
Who else sees it
The payment provider receives your email and address to process the payment, and handles the card details we never see.
The database and hosting providers store and serve the data on our behalf.
The email provider receives your address in order to deliver mail we send you.
Nothing is sold, rented, or handed to advertisers. Data is disclosed otherwise only where the law requires it, or to pursue or defend a legal claim.
How long it is kept
Published block details stay while the block is on the board. Order and payment records are kept as long as accounting and tax rules require. Screening and removal records — including address and user agent — are kept while they may still be needed for a dispute or a claim, and then deleted.
Reservations are cleared when the waiting list is cleared. Checkout holds disappear after 20 minutes.
Your rights
Under KVKK you may ask whether your data is processed, ask what it is and why, ask for it to be corrected or deleted, object to a result produced by automated processing, and claim damages for unlawful processing.
Ask by replying to any email you have had from us, with the order or reservation it concerns. Some data cannot be deleted on request — records kept for accounting, or for an unresolved dispute — and we will say which and why.
Automated screening
Submissions are checked automatically before payment. The link is followed to where it lands, that domain is classified, and the name and tagline are matched against a word list. A submission can be refused entirely by that check.
Automated checks get things wrong in both directions. Every refusal is recorded so a person can look at it, and if yours was wrong, say so and it will be released.
While nothing is for sale
No payment is taken and no payment provider is contacted. A reservation stores the email, the block, and the address it came from — nothing else.