Last updated: 14 July 2026
The short version: BrushVector is local-first, so your artwork never leaves your device. If you use the free tier without an account, we collect nothing about you at all. If you create an account, we hold your email address and your subscription status, and that's about it. We don't run analytics, we don't sell data, and we never see your card details.
The data controller is L. J. Atkinson, trading as BrushVector, of 6 Oak Terrace, Leeds LS15 8JG, United Kingdom. Contact: support@brushvector.com.
Your artwork: nothing. Projects, drawings and animations are stored on your own device. We have no copy and no access.
Account data. If you create an account we hold your email address and sign-in records. Legal basis: performing our contract with you.
Subscription data. Your plan, its status, your cumulative subscribed months (which set your loyalty price), and a Stripe customer reference. Legal basis: performing our contract, and our legal obligations to keep transaction records for tax.
Payments. Handled entirely by Stripe; card details go directly to them and never touch our systems. Stripe also acts as an independent controller for its own fraud-prevention and legal compliance. See the Stripe privacy policy.
Support. If you email us, we keep the correspondence. Legal basis: legitimate interest in answering you.
We use a small number of service providers: Supabase (account sign-in and our subscriptions database), Stripe (payments and billing portal), and Cloudflare (website hosting and content delivery). Our site also loads fonts from Google Fonts, which means Google receives your IP address when the page loads. See Google's privacy policy. Where these providers process data outside the UK, transfers are protected by adequacy decisions or standard contractual clauses.
Account and subscription data is kept while your account exists. If you delete your account (Account menu → Delete account), your account and subscription records are deleted immediately; transaction records are retained for 6 years as required by UK tax law. Support emails are kept for up to 2 years.
We use only strictly necessary storage: a sign-in session token (so you stay logged in) and the app's own settings and projects, which are stored locally on your device for the app to function. We use no analytics, advertising or tracking cookies, which is why there's no cookie banner.
You have the right to access, correct, delete, or receive a copy of your personal data, and to object to or restrict our processing of it. Deleting your account from the Account menu exercises the deletion right for everything except the transaction records we must keep. For anything else, email support@brushvector.com. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Anyone can draw with the free tier, with no account needed and no data collected. Paid accounts are for people 18 or over, or 13–17 with a parent or guardian's permission.
If we change this policy in any material way we'll email account holders before the change takes effect, and update the date at the top.