Your browser is unsupported, this app might not work properly.

Privacy policy

This privacy policy (effective April 8, 2019) explains how your personal data is collected, used, secured and shared when using Whimsy (Whimsy) services such as the whimsy.art app and the api.whimsy.art API (Whimsy services).

By using Whimsy services you agree to the collection and use of data according to this policy, available at whimsy.art/privacy. If this privacy policy changes, continuing to use Whimsy services is an agreement of the revised policy.

Contact us if you have any questions!

Data collection

Personal data is collected via the forms you submit when interacting with Whimsy services, such as when registering an account, gallery or artwork.

Personal data that may be requested includes:

  • Full name.
  • Description.
  • Geo location coordinates.
  • Email address.
  • Bitcoin address.

The content of the galleries or artworks you register may incidentally contain personal data.

Your use of Whimsy services may be logged.

Data use

The minimum amount of personal data that is required for functionality of Whimsy services is collected.

Activity logs are analyzed to improve security, performance and user experience.

Data security

Communication with Whimsy services is encrypted using HTTPS to reduce the risk of personal data being intercepted.

User passwords are held encrypted according to current best practices and haveibeenpwned.com is used (without sharing your password) to disallow over 517 million passwords previously exposed in data breaches.

If you lose access to a device that is logged in to Whimsy services, you can remotely logout all sessions at whimsy.art/logout.

Data sharing

Whimsy strives to explain how your personal data will be shared when it’s collected in forms such as user registration and settings, or when confirming user interactions such as requesting to exhibit an artwork.

The following personal data is shared with the public for user profiles:

  • Full name.
  • Description.
  • Country and region.

The following personal data is occasionally shared with relevant users as a result of user interactions to enable Whimsy services functionality:

  • Email address.

Third party companies or individuals may be employed to facilitate or analyze Whimsy services. They will only access your personal data to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Most personal data is stored with MongoDB Cloud Atlas. Images you upload are stored with DigitalOcean Spaces and served with imgix. App activity is logged using Google Analytics.

Whimsy may be compelled to share your personal data with authorities according to the laws and regulations where the data is held (mostly the USA) or where Whimsy operates from (Australia).