Privacy notice
Last updated: 29 October 2026
Controller: ArtAtlas, Inc., 8 The Green, Suite B, Dover, DE 19901, USA (registered office). Contact for all privacy matters: saad@artatlas.global.
1. What we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Account: email, username, password or sign-in token | Create and secure your account, send sign-in emails | Contract |
| Optional profile: name, photo, age bracket (16 and over), location, how you know the art world | Personalise your profile, leagues and regional rankings | Consent (you choose to add it) |
| Play: estimates you lock, scores, "love" or "would buy" reactions | Run the game, scores and leaderboards | Contract |
| Taste profile: styles you lean towards, inferred from your plays and reactions | Choose lots you may enjoy. Used inside the game only. You can switch it off in Settings. | Legitimate interests |
| Game emails you ask for: result emails, reminders to play | Tell you when a lot you called has settled | Consent (you opt in and can withdraw any time) |
| Waitlist: email, optional WhatsApp number, referral code, who referred you | Tell you when a season opens, run the referral reward | Consent |
| Technical: IP address, device and browser, pages visited, error logs | Security, fraud and abuse prevention, keeping the game running | Legitimate interests |
| Consent records: what you agreed to, when, and the version of the text | Prove your choices | Legal obligation and legitimate interests |
We do not use your data for advertising and we never sell it.
2. Who receives your data
- Service providers who process data on our instructions: Lovable (hosting and database), Cloudflare (delivery and security), and Google (Gmail and Google Workspace, for email).
- Sponsors, galleries and auction houses: only if you tick a separate, unticked box naming that specific partner. We then share your email so they can contact you about related sales. You can withdraw in Settings at any time, and we tell the partner to stop. We never share your estimates or scores with your name on them.
- Other players: your username and points appear on public leaderboards unless you choose initials only or hide yourself in Settings. Never your email or real name.
- Authorities or advisers: where the law requires it, or to protect rights or defend a claim.
We may publish anonymous, aggregate statistics (for example "the crowd was higher than the house on 6 of 9 lots") that do not identify anyone, and we show how many players are behind them.
3. International transfers
We are a US company. Your data is processed in the United States and by providers in other countries, under contractual protections with those providers.
4. How long we keep it
- Account and play data: while your account is open, then deleted within 30 days of a deletion request. Anonymous aggregate statistics may remain.
- Waitlist data: until you unsubscribe, or 12 months after the season you joined for opens, whichever comes first.
- Technical logs: up to 12 months.
- Consent records: up to 3 years after you withdraw, to prove what you chose.
5. Your rights
You can ask us at any time to access, correct, export or delete your data, to object to or restrict our use of it, or to withdraw a consent. Withdrawing a consent does not affect what we did before. In Settings you can download your data, delete your account and manage every consent. Otherwise write to saad@artatlas.global. We reply within one month. If you are in the EU or UK, you can complain to your local data protection authority (in France, the CNIL; in the UK, the ICO). Residents of some US states have similar rights, which we honour for everyone.
7. Children
The game is not for people under 16. If we learn that someone under 16 has an account, we will remove it and delete their data.
8. Security and decisions about you
We apply reasonable security measures. We do not make decisions about you that have legal or similarly significant effects.
9. Changes
We will tell you by email or in the game if this notice changes in an important way.