The short version
Grid Your Art has no accounts and no user database. The images you upload never leave your device — the grid is drawn in your browser and we never receive the file.
When you pay, Stripe handles the card details and we never see them. We keep your email and receipt number only so we can deal with support and refunds.
We show ads and measure traffic, which involves third-party cookies. Those are off until you agree to them, and you can change your mind at any time.
1. Who we are
Grid Your Art ("we", "us", "our") operates the website at gridyourart.com and the grid drawing tool available on it. We are based in Australia and are the data controller for the information described in this policy.
If you have any question about this policy or about your personal information, contact us at privacy@gridyourart.com.
2. What we collect
We have deliberately built the site to collect as little as possible. There are no user accounts, no logins, and no customer database.
Information you give us that reaches us
| What | When | Why |
|---|---|---|
| Email address | At checkout, and if you submit a refund request | To send your receipt, to confirm a purchase belongs to you, and to update you about a refund |
| Stripe receipt number | If you submit a refund request | To locate the payment you are asking about |
| Refund reason and notes | If you submit a refund request | To understand the problem and improve the tool |
Information you give Stripe, not us
Your card number, expiry, and security code are typed into a payment form hosted by Stripe and sent directly to them. They never pass through our servers, we never store them, and we have no way to see them. All we get back from Stripe is confirmation that a payment succeeded, along with the receipt number and the email address you gave at checkout.
Stripe handles that card data as its own controller. Their handling of it is covered by the Stripe Privacy Policy.
Information collected automatically
| What | Source | Why |
|---|---|---|
| IP address, browser and device type, pages requested, timestamps | Our host, Vercel, records these in standard server logs | Security, abuse prevention, and keeping the site running |
| Advertising and analytics identifiers | Cookies set by Google and Meta, only if you consent | Measuring traffic and showing relevant ads. See section 7 |
| An unlock expiry timestamp | Stored in your own browser's local storage | Remembers that you have paid so your downloads stay available for one hour |
3. Your images
The photo you load into the grid tool is read and drawn entirely inside your own browser. It is never uploaded to us, never sent to a server, and never stored anywhere by us. When you close the tab it is gone. This is why you need to upload again for a new session.
The same applies to the gridded image you export. The file is generated on your device and saved straight to your downloads. We never receive a copy and have no way to see what you were working on.
4. How we use your information
We use the small amount of information we hold to:
- take payment and send you a receipt
- give you access to your downloads for the one hour window you paid for
- respond to support enquiries and process refund requests
- keep the site secure and detect fraud or abuse
- understand which pages are useful, in aggregate, so we can improve them
- show and measure advertising, where you have agreed to it
- meet our legal and tax obligations
We do not sell your personal information for money. We do not send marketing emails, because we do not keep a mailing list.
5. Cookies and browser storage
A cookie is a small file a website stores in your browser. Some are needed for the site to function; others exist to measure or advertise. We group them as follows.
Strictly necessary
These are always on, because the site cannot work without them. They do not track you across other websites.
| Name | Set by | Purpose and life |
|---|---|---|
| Download unlock | Grid Your Art | Browser storage, not a cookie. Holds the time your one hour download window ends. Cleared automatically once it expires |
gy_consent |
Grid Your Art | Browser storage, not a cookie. Remembers your cookie choice so we stop asking. Lasts 6 months |
__stripe_mid, __stripe_sid |
Stripe | Fraud prevention on the payment form. Roughly 1 year and 30 minutes respectively |
Analytics and advertising
These are off by default and are only set once you accept them. They are described in the next section.
6. Advertising and analytics
We fund the free parts of this site with advertising, and we use analytics to see which guides people find useful. Both rely on third-party services that set their own cookies and receive your IP address.
| Service | What it does | Their policy |
|---|---|---|
| Google AdSense | Displays ads on our guides, blog articles, and sample packs pages. The grid tool itself carries no ads. Google and its partner vendors use cookies to serve ads based on your prior visits to this and other websites | How Google uses cookies in advertising |
| Google Ads | Measures whether someone who clicked one of our ads went on to buy, so we know which ads are worth paying for | Google Privacy Policy |
| Google Analytics 4 | Counts visits and shows which pages are read, in aggregate | Google Privacy Policy |
| Meta Pixel | Measures the results of our Facebook and Instagram ads and lets us show ads to people who have visited before. Sets the _fbp and _fbc cookies |
Meta Privacy Policy |
Third-party vendors and personalised ads
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and other sites on the internet.
How to turn this off
- Use our to withdraw consent on this site at any time.
- Opt out of personalised Google ads at My Ad Center.
- Opt out of many participating advertisers at once through the Digital Advertising Alliance's WebChoices tool.
- Control Meta's ad targeting in your Facebook or Instagram ad preferences.
- Block or delete cookies in your browser settings. Note this may affect other sites too.
Turning off personalisation does not remove ads. It means the ads you see are less relevant to you.
7. Who we share information with
We do not sell your personal information. We share it only with the service providers that make the site work, and only as far as each one needs:
| Provider | What they handle | Where |
|---|---|---|
| Stripe | Payments, receipts, refunds | United States and worldwide |
| Vercel | Website hosting and server logs | United States and worldwide |
| Resend | Sending support related email | United States |
| Advertising, analytics, fonts | United States and worldwide | |
| Meta | Advertising measurement | United States and worldwide |
| Cloudflare | Serving images, video, and script libraries | Worldwide |
We may also disclose information if the law requires it, or to establish or defend a legal claim.
International transfers
Because these providers operate globally, your information may be processed outside the country you live in, including in the United States. Where the law requires a safeguard for that transfer, we rely on our providers' standard contractual clauses and equivalent measures.
8. How long we keep information
- Uploaded images: never held at all, so nothing to keep.
- Payment records: retained by Stripe, and by us in our accounting records, for seven years to meet Australian tax law.
- Support and refund correspondence: kept for up to two years so we can handle repeat issues and disputes.
- Server logs: retained by Vercel on their standard schedule, typically about 30 days.
- Your download unlock: stored in your own browser and expires after one hour.
9. Your rights
You are entitled to know what we hold about you, so here is the complete list.
For customers: the email address you used at checkout, your Stripe receipt number and the payment record itself, and, if you sent a refund request, the reason and notes you wrote in it.
If you have not bought anything, we hold nothing that identifies you. There are no accounts and no mailing list, and images loaded into the tool are processed in your browser and never reach us.
A copy, or a correction
Ask and we will send you everything on file, or fix anything that is wrong. We reply within 30 days and there is no charge. Including your receipt number helps us find the record and confirm the request is yours.
Deletion
We can delete the reason and notes from a refund request, along with any support emails you have sent us.
We cannot delete the payment record, which includes your email address and receipt number. Australian tax law requires us to keep records of our sales for seven years and we have no discretion about that. It is used for accounting and nothing else, and it is removed once the seven years are up. Both the GDPR and the Australian Privacy Principles permit information to be kept where another law requires it.
Asking us to stop using your information
You can object to how we use your information at any time. In practice there is one use only, which is completing your purchase and keeping the tax record described above, and we cannot stop that while the retention period runs. We do not profile you, build audiences from your purchase, sell your information, or send marketing, so there is nothing else running in the background to switch off.
Advertising and analytics cookies
This one is yours to control directly, so please do not email us about it. Your choice applies immediately and you can change it as often as you like.
How to reach us
Email privacy@gridyourart.com for anything above. We will never treat you differently for asking, and we will not ask you for identity documents. Your receipt number is all the verification we need.
If you are in Australia and are unhappy with how we have handled your request, you can raise it with the Office of the Australian Information Commissioner.
10. If you are in the UK or the EU
Under the UK GDPR and EU GDPR you also have the right to object to processing, the right to data portability, and the right to withdraw consent at any time. Withdrawing consent does not affect anything we did before you withdrew it.
Our lawful bases for processing are:
- Contract: taking payment and giving you the downloads you bought.
- Consent: advertising and analytics cookies. You give this through our cookie banner and can withdraw it at any time.
- Legitimate interests: keeping the site secure and preventing fraud and abuse.
- Legal obligation: keeping tax and accounting records.
You have the right to lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office if you are in the UK.
11. If you are in the United States
Some US state laws, including the California Consumer Privacy Act as amended by the CPRA, give residents specific rights over their personal information. These include the right to know, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information.
We do not sell personal information for money. However, when advertising cookies are active, the transfer of identifiers to Google and Meta for targeted advertising may be treated as "sharing for cross-context behavioural advertising" under California law.
You can opt out of this at any time using our . We also honour the Global Privacy Control signal sent by some browsers and extensions. We will not discriminate against you for exercising any of these rights.
12. Security
The site is served over HTTPS. Card details are handled entirely by Stripe, a PCI Service Provider Level 1 certified processor, and never reach our systems. Because we hold so little information in the first place, there is very little to lose in a breach. No method of transmission over the internet is completely secure, so we cannot promise absolute security.
13. Children
This site is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
14. Changes to this policy
If we change this policy we will update the date at the top of the page. If the change is significant, such as adding a new advertising partner, we will ask for your cookie consent again.
15. Contact us
For anything to do with privacy, your data, or this policy:
- Email: privacy@gridyourart.com
- For help with the tool itself, use the support page.