Privacy Notice

Inkwell is operated by Haedyn mullen, who is the data controller for the personal data collected through this service. That means Haedyn mullen decides how and why your data is processed and is responsible for handling it in line with applicable data protection law.

• Account data — your email address, username, password (stored only as a secure hash), profile photo, banner, and bio.
• Content you create — artwork you upload, custom brushes, comments, community messages, profile decorations, and speedpaint recordings you choose to share.
• Usage data — how you interact with the service (pages visited, features used), device identifiers, and IP address, used for security and product improvement.
• Support messages — anything you send us when you ask for help.

Payment details (card numbers, billing address) are collected and processed directly by Paddle, our Merchant of Record — we never see or store your full card details.

• Providing the service — creating your account, storing your artwork and settings, showing the gallery and communities (legal basis: performance of our contract with you).
• Security and fraud prevention — protecting accounts, blocking abuse and automated sign-ups (legal basis: legitimate interests).
• Product improvement — understanding which features are used so we can improve Inkwell (legal basis: legitimate interests).
• Customer support — responding when you contact us (legal basis: legitimate interests / contract).
• Legal obligations — keeping records where the law requires it (legal basis: legal obligation).

• Service providers — hosting, database, and storage providers that run Inkwell's infrastructure, acting on our instructions.
• Paddle (Merchant of Record) — for the sale of Premium subscriptions, payment processing, subscription management, tax compliance, and invoicing.
• Professional advisers — legal or accounting advisers where needed.
• Authorities — where we are required to share data by law.

We do not sell your personal data to anyone.

We keep your data for as long as your account is active or as needed to provide the service. When data is no longer needed — for example after you delete your account — it is deleted or anonymised within a reasonable period, except where the law requires us to keep it longer.

Depending on where you live, you may have the right to access, correct, or delete your personal data, to restrict or object to how we process it, to receive a portable copy of it, and to withdraw consent where processing is based on consent. You can exercise most of these directly from your account settings (editing your profile, making artwork private, or deleting content), or by contacting us. If you are in the UK or EEA, you also have the right to complain to your local data protection authority, and we will respond to requests within one month.

Inkwell's infrastructure and Paddle may process data outside your country, including outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, and access controls that limit who can reach production systems.

Inkwell uses essential cookies and browser storage to keep you signed in and remember your preferences (such as your theme and autosaved drawings). We do not use advertising or marketing cookies. You can clear these at any time through your browser settings, though signing in and some preferences will stop working without the essential ones.

We may update this notice from time to time and will post the new version here with an updated date. For any privacy question or request, contact us through the support channel listed on the site.