Privacy

The short version

• We collect what the site needs to run: your account details, your photos and works, your entries and your messages.
• We never train anything on artists' photos. We never sell personal information. We never share your email address with visitors.
• Notifications are in-app and push. Email is for invitations and account matters. No SMS.
• Your data is yours to ask about. You can ask for a copy of it, or for your account and data to be deleted, at any time.

What we collect

• Account details. Your name, your handle, your email address and your sign-in methods. We never see or store a password — passkeys live on your own devices.
• Your work. The photos you upload, the titles and details you give them and the places you choose to show them.
• Calls and entries. The calls you run or enter, entry details, jury scores and results. Jury scores stay inside the call.
• Messages. The messages you send through the site. Messaging needs an account, so every message has a sender.
• Technical records. Our host keeps short-lived logs of visits and errors so we can keep the site running and fix faults. We count visits with GoatCounter, which uses no cookies and does not follow you across sites.

What we never do

• We never train AI on artists' photos — not for our own tools and not for anyone else's. Our AI policy sets out the declaration levels.
• We never sell personal information, and we never hand it to advertisers.
• We never publish your email address. Visitors reach you through the site, not around it.
• We never read your messages to aim advertising at you. Messages exist for the people in the conversation and for keeping the service safe.

Who else touches your data

Three services help us run GallerySpark, and each one gets only what its job needs:

• Cloudflare hosts the site and stores its data.
• Resend delivers our email, such as juror invitations.
• GoatCounter counts visits, without cookies.

How long we keep things

• Account data lives while your account does.
• Site feedback is kept up to six months and then deleted.
• Call records — entries, results and the audit log — are the organization's record of its event as well as yours. They stay while the organization keeps its account.
• Technical logs are kept briefly and then deleted by our host.

Your choices

• See it. Your account pages show most of your data. For the rest, ask us and we will provide a copy.
• Delete it. Close your account, or ask us to delete it for you. We remove your personal data. Call records stay with the organization that ran the call, and we remove your name from them where we can.
• Quiet it. Push notifications can be turned off at any time in your notification settings.

Changes and questions

If we change how we handle personal information in a way that matters, we say so in the product before the change starts and we update the date below.

Privacy questions go through the feedback page. A person reads them.

Last updated October 15, 2026.