CKURO.ART / Legal
Privacy Policy
Last updated: April 19, 2026
CKURO.ART ("we", "us", "our") is a digital art marketplace for original, human-created artwork. Here's what we collect, how we use it, who we share it with, and what you can do about it.
By creating an account or using the platform, you agree to the practices described in this policy.
1. Information We Collect
Account & Identity Data
When you sign up via Google or GitHub OAuth, we receive your name, email address, and profile picture from that provider. This information is used to create and authenticate your CKURO.ART account. We store your email address, display name, username, bio, avatar URL, and optional social links (website, Twitter/X handle, Instagram handle) that you choose to add to your profile.
Artist Application Data
If you apply to sell on CKURO.ART, we collect your full name, artist bio, portfolio URL, social profile links, and up to three sample artwork images you submit with your application.
Artwork & Content
Artists upload artwork files (images, audio, GIF, video, 3D models, and print-ready files), preview images, titles, descriptions, pricing, categories, and tags. Preview files are stored in a publicly accessible Cloudflare R2 bucket. Original high-resolution files are stored in a private bucket and only delivered to buyers after a completed purchase.
Transaction & Payment Data
When you make a purchase, we record which artwork was purchased, the buyer, the seller, the amount, currency, platform fee, payment method (Stripe), and order status. We don't store card details. Stripe handles all payment processing. For artists receiving payouts, we store your Stripe Connect account ID. Download tokens are generated for each purchase and expire after 72 hours.
Community Content
If you participate in the forum or comment on blog posts, we store your posts, threads, reactions, and the timestamps of that activity, associated with your account.
Technical & Usage Data
Our infrastructure (Vercel, Cloudflare, Neon) may log standard server data including IP addresses, browser type, pages visited, and request timestamps for security, performance, and debugging purposes. We don't run third-party advertising trackers or sell this data.
2. How We Use Your Information
- ▸To create, authenticate, and manage your account.
- ▸To display your public artist profile and artwork listings.
- ▸To process purchases, route payments to artists, and deliver download files.
- ▸To review and moderate artist applications and submitted artwork.
- ▸To send transactional emails: purchase confirmations, download links, application status updates, and account notices.
- ▸To detect and prevent fraud, abuse, and policy violations.
- ▸To operate and improve the platform.
We don't use your information for advertising, profiling, or selling to third parties.
3. Third-Party Services We Use
We use the following services to operate the platform. Each has its own privacy policy.
Authentication and user session management. Clerk processes your OAuth login credentials and manages secure sessions. Your email, name, and OAuth tokens are stored with Clerk.
Payment processing for buyers. Stripe Connect for artist payouts. Stripe handles all cardholder data — we never see or store your card number, CVV, or full payment details.
File storage for artwork previews and original files. Files are stored in Cloudflare's infrastructure.
Managed database hosting for all platform data. Neon stores data in encrypted, access-controlled environments.
Transactional email delivery. We send your email address to Resend only to deliver emails you've triggered (e.g. purchase confirmations).
Platform hosting and global CDN. Vercel processes requests and may log standard server metadata.
4. Data Retention
We keep your account data while your account is active. Delete your account and we remove your personal profile data. Transaction records are kept for up to 7 years — financial law requires it. We minimize and anonymize what we can. Artwork files may stick around briefly after deletion to cover any pending orders.
5. Your Rights
Depending on your location (including the EU/EEA under GDPR and California under CCPA), you may have the following rights regarding your personal data:
- ▸Access: request a copy of the personal data we hold about you.
- ▸Correction: update inaccurate or incomplete information via your profile settings.
- ▸Deletion: request that we delete your account and associated personal data.
- ▸Portability: request your data in a machine-readable format.
- ▸Objection: object to certain processing activities.
To use any of these, email kuroninja@ckuro.cc. We respond within 30 days.
6. Cookies & Local Storage
We use cookies for authentication (via Clerk) and to save your preferences. No advertising cookies. No cross-site tracking. Disable cookies and you won't be able to sign in.
7. Age Restrictions
CKURO.ART is for users 18 and older. We don't knowingly collect data from minors. If you think a minor has an account, contact us and we'll remove it.
8. Changes to This Policy
We'll update this when needed. The date at the top reflects the latest change. Continued use after changes means you accept the updated policy. For significant changes, we'll email you.
9. Contact
Privacy questions? Email us:
CKURO.ART
kuroninja@ckuro.cc