Privacy Policy
Updated: April 8, 2026.
Overview
What to Art collects and processes limited information so the site can generate prompts, save optional account data, and let users share results.
Information We Process
-Prompt inputs and settings you submit, including phrases, moods, modes, prompt options, and generated outputs.
-Email address information if you use the email sign in flow powered by Supabase authentication, including magic link, OTP, and authentication email delivery.
-Saved generation history and favorites when those features are used.
-Shared content you choose to publish through the share feature, including the phrase, mode, mood, generated prompts, selected options, and theme.
-Technical data that service providers may process automatically, such as IP address, device or browser information, request metadata, and basic logs needed to operate and secure the service.
Browser Storage
The app stores some settings and content in your browser, including theme preference, auto-create preference, local history, and local favorites.
Authentication and session state may also be stored in browser storage by Supabase so you can stay signed in.
How We Use Information
Your information is used:
-To generate art prompts and random phrase suggestions through the app's API routes and OpenAI integration.
-To authenticate users by email, send magic link, OTP, and authentication emails, and associate optional saved history or favorites with an account.
-To create public share pages and social share images when you choose to share a result.
-To maintain the service, debug failures, prevent abuse, and improve reliability.
Third-Party Services
Supabase is used for authentication and database storage, including public share records and account saved content.
Resend is used to send magic link, OTP, and other authentication emails and may process email addresses and related delivery metadata on our behalf.
OpenAI is used to process prompt generation and randomizer requests sent through the site's server side API routes.
Hosting, delivery, and infrastructure providers may process standard technical request data to serve the site.
Public Sharing
If you use the share feature, the shared result is intended to be publicly accessible by link. Do not include private, sensitive, or confidential information in content you choose to share.
Retention
Data stored in your browser remains there until you clear it or your browser removes it.
Account data, saved items, and shared records may remain in service databases until they are deleted, overwritten, or no longer needed for operation of the service.
Backup or log copies may persist for a limited period after deletion.
Control your data
You can avoid signing in, avoid using the share feature, and clear browser storage locally at any time.
If you want account or shared data removed, contact WhatToArt support using the 'contact us' information in the about tab.