This website allows users to upload and share in-game paintings for ARK: Survival Ascended and ARK: Survival Evolved.
By using this website, you agree to this Privacy Policy.
2. Information We Collect
We may collect the following information:
Uploaded files (images or .pnt painting files)
Basic submission data such as file names or metadata
If you register: a username, email address, and a hashed password (we cannot see your password)
If you log in via Discord: your Discord username, Discord user ID, and avatar URL
If you log in via Google: your Google ID, email address, and profile picture URL
Email address (used only for account-related notifications such as password resets)
Comments you post on paintings
Rating data (tied to your account and stored on our server)
Bookmarked or favorited paintings
Your IP address when downloading files (used only to prevent download count manipulation)
Your IP address is temporarily logged for rate limiting on login, registration, and password reset forms (automatically expired)
3. How We Store Data
Account information is stored in a SQLite database separate from paintings.
Passwords are hashed using PHP's built-in password hashing — we never store plain-text passwords.
Avatar images are stored as PNG files on the server.
4. How We Use Information
Display community-submitted paintings
Allow users to download shared content
Manage user accounts and authentication
Display usernames and avatars alongside uploaded content and comments
Manage the gallery of uploads
Allow you to bookmark or favorite paintings
We do not sell or use your data for advertising or marketing.
5. Discord and Google Login
When you log in via Discord, we receive your Discord username, user ID, and avatar from Discord's API.
We do not receive or store your Discord password.
You can revoke Discord access at any time from your Discord account settings.
When you log in via Google, we receive your Google ID, email address, and profile picture from Google's API.
We do not receive or store your Google account password.
You can revoke Google access at any time from your Google account settings.
6. Public Content
Uploaded paintings, your username, avatar, and comments are publicly visible.
Do not upload content or post comments you do not wish to share publicly.
7. Data Retention
Account data is retained until you delete your account.
Uploaded files and comments may remain after account deletion but will be disassociated from your username.
Votes and bookmarks are removed when your account is deleted.
8. Cookies and Tracking
Session cookies are used to maintain your login state.
A CSRF cookie is used to prevent cross-site request forgery attacks.
No analytics, advertising, or third-party tracking services are used.
9. Third-Party Access
We do not share your data with third parties.
Discord and Google logins use OAuth APIs for authentication only.
10. Children's Privacy
This site is not intended for children under 13. We do not knowingly collect personal information from children.
11. Your Rights (GDPR / CCPA)
Depending on your jurisdiction, you may have the following rights:
Access: Request a copy of the personal data we hold about you
Correction: Request that we correct inaccurate data
Deletion: Request deletion of your personal data (you can also delete your account at any time via your account settings)
Data Portability: Request a copy of your data in a machine-readable format
Withdraw Consent: If you logged in via Discord or Google, you may revoke access at any time from those platforms
To exercise any of these rights, contact us using the information in the Contact section below.
12. Changes to This Policy
This Privacy Policy may be updated at any time. Continued use of the site means you accept any changes.
13. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, contact me at:
