Privacy Policy

Last Updated: September 16, 2026

Introduction

artclub helps you discover art exhibitions and keep a record of the ones you save and see. This policy explains what we collect through our website and our iOS app, why, and the choices you have. Where something applies to only one of them, we say so.


artclub is not intended for anyone under 13.

What We Collect

Your account:

  • Your email address, which you give us when you sign in
  • Your username. We create one from the first part of your email address when your account is made, and you can change it in Settings
  • The date your account was created, and the invite link you arrived through, if any

  • Your activity:

  • Exhibitions you save, mark as seen, or mark as missed
  • Ratings, written reviews and notes you add, and the dates you visited
  • Members you tag as having seen an exhibition with you
  • Museums, mediums and members you follow, and who follows you
  • Your email notification settings, and a record of the emails we have sent you

  • Diagnostics (website and app):

  • Crash reports and error details, including the screen you were on
  • Performance traces from a small sample of sessions
  • Device type, operating system version, app or browser version, and IP address
  • Your account identifier, so we can connect an error to the account that hit it

  • Analytics (website and app):

    We measure how the website and the app are used, so we can see which features people find useful and make them better. That means the pages and screens you view and which features you use, along with your device and browser information and your IP address. Once you sign in, this is tied to your account.


    On the website we also record your page interactions: the pages you move through, where you scroll and what you click or type into. Recording starts when you first interact with a page, so a visit where you read nothing and leave is not recorded. Typed values are hidden before the recording leaves your browser, and so is your email address where the site displays it.


    Sign-in security:

    When you request a sign-in code we run a bot protection check, which receives your IP address and browser or device information.


    Publication icons:

    Where we show a critic review, we load the publication's icon from a third party icon service. That service receives your IP address and the web address of the publication.


    Location:

    The map on our website can centre on your location if you press the locate button. Your browser asks permission first, the coordinates only move the map, and we never store or transmit them. The app does not request your location. Our analytics providers can work out an approximate location, such as your city or country, from your IP address rather than from your device's location services.

    How We Use It

  • Create and manage your account and sign you in
  • Save your exhibitions, ratings, reviews and follows, and show them back to you
  • Show your username, ratings and reviews to members who follow you
  • Send one-time sign-in codes and the emails you have chosen to receive
  • Diagnose crashes and errors, and keep the service fast and reliable
  • Protect the service against automated abuse
  • Understand which parts of the website and app are used, so we can improve them
  • Meet our legal obligations

  • Under UK data protection law we rely on: performing our contract with you, for your account, your activity and sign-in codes; our legitimate interests, for security, fault diagnosis and analytics for the website and app, including where that analytics is linked to your account; your consent, for the newsletter, optional notification emails and location access; and legal obligation where the law requires it.

    What Other Members Can See

    artclub is social by design. Members who follow you can see your username, the exhibitions you have saved and seen, your ratings and your written reviews. Members you tag as companions can see that you tagged them. If someone follows you or tags you, we may email you and that email will include their username.


    Your email address is never shown to other members.

    Who We Share It With

    We do not sell your personal information, and we do not share it for advertising.


    We use a small number of service providers who process data on our instructions and may not use it for their own purposes. Each receives only what it needs:


  • A cloud hosting, database and authentication provider, which stores your account and activity
  • An error monitoring and performance provider, which receives crash reports, diagnostic device information, your IP address and your account identifier
  • A bot protection provider, which receives your IP address and device information when you request a sign-in code
  • An email delivery provider, which receives your email address and the contents of our emails to you
  • Analytics providers, which receive the pages and screens you view, the actions you take, your device and browser or app information, your IP address, the website interaction recordings described above and, once you sign in, your account identifier
  • A map provider, which receives your IP address when the website loads map tiles
  • An icon service, which receives your IP address and the web addresses of publications whose reviews we show you

  • We use each of these under their standard terms, which require them to keep your information secure and to use it only to provide their service to us. Some of them store or process data outside the UK, and where they do we rely on UK adequacy regulations or standard contractual clauses.

    How Long We Keep It

    We keep your account and activity for as long as you have an account. Diagnostic and performance records are kept for a limited period by our monitoring provider and then deleted automatically. Records of emails we have sent are kept while your account exists. Analytics records follow our analytics providers' retention settings. The deletion record described below is kept after an account is gone.

    Your Choices

  • Update your account information in Profile Settings
  • Change or turn off any notification email in Settings, or use the unsubscribe link in any email
  • Delete your account in Profile Settings, on the website or in the app

  • Withdrawing consent:

    Turn off newsletter and notification emails in Settings or through the unsubscribe link in any email, and withdraw location access in your browser settings. Withdrawing consent does not affect processing carried out beforehand.


    Your rights:

    You can ask us to give you a copy of your data, correct it, delete it, transfer it, or restrict or object to how we use it. Email hello@artclub.club and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.


    Account deletion:

    Deletion from Profile Settings is immediate and permanent. Your account, exhibition history, ratings, reviews, notes, follows and email preferences are removed from our database.


    We keep a deletion record to verify deletions and understand why people leave. It contains the deletion date, your internal account identifier, how long the account existed, counts of your saved, seen and missed exhibitions and follows, and your optional reason for leaving. It does not include your name, email address or username, and cannot be used to contact you. If you leave an optional message we keep it alongside that record, so please do not include personal details.


    Records held by our service providers for authentication, error monitoring, analytics and emails already sent follow their own retention periods and are not removed immediately by account deletion.

    Cookies and On-Device Storage

    Our website uses cookies and similar storage for two things. Sign-in cookies keep you logged in and are essential, so the site cannot work without them. Analytics cookies measure how the site is used and are not essential. You can block or clear either kind in your browser settings, though signing in will not work without the essential ones.


    The app does not use cookies. It stores your sign-in session, an analytics identifier, notes of prompts you have already seen, and a cache of public exhibition, museum, artist, medium and movement information so the app works quickly and offline. Your saved and seen exhibitions are not stored on the device. Signing out ends your session and unlinks analytics from your account. Deleting the app removes everything listed here.

    Security

    We encrypt data in transit, sign you in with one-time email codes so there is no password to steal, and enforce database access rules that stop one member reading another member's private data.

    Changes and Contact

    We may update this policy as artclub changes. The date at the top shows when it was last revised.


    artclub is the data controller for the information described here. Email us at hello@artclub.club.