privacy
plan.tattoo (formerly dollparts) lets you try a tattoo design on a 3D figure before you get it. It is run by Moirai Digital in Ontario, Canada. This page says what we keep, why, who handles it, how long it stays and what you can ask of us. Canada's federal privacy law, PIPEDA, applies: we collect only what the tool needs, say why, and use it for nothing else without asking.
Last revised 21 October 2026.
what we keep
Your account. Your email address and password, held by our sign-in provider, Clerk, so you can sign in; Clerk also sends the verification email. We keep the date you made the account, whether you are an artist, any grant we gave the account (the artist role, admin), when you last tried a code (to limit guessing), and whether you turned on "email me when something new ships", and when.
Your designs and plans. An image you upload is cleaned up in your browser and kept in your browser's own storage, on that device; it is not sent to us. When you save a plan to your account, the plan goes to our database and storage: the tattoos, their positions and sizes, the figure, a small picture, and your own designs in it as the lifted, transparent image. They are private to you unless you share the plan.
Shared plans. When you share a plan, we make a public still of it and public display copies of your own designs in it, and show them at the plan's link with its name and the credits of any flash in it. Anyone with the link can see that page and open a copy of the plan. Unsharing deletes the still and the copies.
Artists and referrals. An artist page holds what the artist fills in (handle, name, studio, city, styles, bio, booking link, Instagram), the display copies of their flash, and photos of their healed work, re-encoded with any location data in them removed. The original files an artist uploads are kept privately, for the artist only. Flash and artists you save to your collection are a list of their ids.
When you open an artist's link, open their page from outside plan.tattoo, or type their code at sign-up, we set a cookie
named ref that holds which artist it was and how you arrived. It lasts 30 days. It is read when you make an
account, to credit that artist, and then cleared. We count visits to artist pages as a number per artist per day, with
nothing about the visitor.
Messages. If you write to us through the form on the front page, we receive your message and, if you give one, your email address, so we can reply.
Analytics. We use PostHog to count how the tool is used: the front page seen, the tool opened, a tattoo
placed, a design uploaded, an account asked for and made, a plan saved, a plan shared, a shared plan seen and opened; with
the figure, which version of the site it was, and, on the first event of a visit, the campaign tags in the link you
followed, the site you came from and the artist whose link brought you, if any. No image, no design and no email address
is sent. Like any server, PostHog sees the IP address an event comes from; our project is set to discard it, so no
location is kept from it. PostHog sets no cookie and there is no session recording. To tell visits apart we keep a random id in your
browser's localStorage under dollparts.visitor; once you sign in it is linked to your account.
You can clear it by clearing this site's data. Our host's Web Analytics also counts page views on the public pages,
without cookies, and so does Metricool, which we use for our social media: it receives the page's address, the size of
the browser window and the site you came from. Metricool sets no cookie and keeps no IP address.
Server logs. Our host, Vercel, keeps request logs (IP address, time, page, browser) for a short time, for security and debugging.
We buy no data about you, show no ads, and sell nothing we hold.
who handles it
| processor | what it does for us |
|---|---|
| Clerk | sign-in: your email, password and sign-in record; the verification email |
| Neon | the database: accounts, grants, artist pages, plans, the collection, the email switch |
| Vercel and Vercel Blob | hosting and the functions behind the tool; file storage: a private store for originals and plans, a public one for display copies and the stills of shared plans |
| Resend | sends the contact form to us, and an announcement to an account that turned the email switch on |
| PostHog | the analytics events above; no cookie, no session recording |
| Metricool | counts visits to the public pages; no cookie |
Each handles data only on our instructions, under its own data processing terms. Where a processor stores data outside Canada, it is held under that country's laws; PIPEDA allows this provided we stay responsible for it, and we do.
how long we keep it
- Everything tied to your account (sign-in record, plans, designs, collection, artist page, flash, photos, grants, the email switch): until you delete the account. Deleting it, from "manage account" in the account menu, removes your sign-in record at Clerk, and Clerk tells us, so we delete every record and file we hold for the account at the same time. Backups held by our processors expire on their own schedules.
- Shared stills and display copies: until you unshare the plan, delete it, or delete your account.
- An artist's private originals: until the account is deleted.
- Old handles: a changed handle points to the new one for 90 days.
- Copies in other people's plans: flash an artist deletes leaves a private copy in any saved plan that used it, marked "removed by the artist", for as long as that plan exists.
- Referral credit: for the life of the referred account.
- Analytics events: as long as our PostHog project keeps them. Logs: as set by the host.
- Contact-form messages: in our mailbox until dealt with.
We email you to verify your address and to answer messages you send us. No newsletters.
If you want to hear when something new ships, turn on the one switch in the account menu, "email me when something new ships". It is off by default, and we record when you turned it on. Only accounts with it on get announcements. Every announcement says who it is from and how to reach us, and carries an unsubscribe line; turning the switch off or writing to us stops them at once. We follow Canada's anti-spam law, CASL, and share the list with no one.
cookies
Clerk sets the cookies needed to keep you signed in. The ref cookie is described above. PostHog and Metricool set none.
There are no advertising or cross-site tracking cookies.
your rights
Under PIPEDA you can ask what we hold about you and get a copy (we answer within 30 days); correct anything wrong (most of it you can edit yourself, in the account menu or the studio); withdraw consent, by turning the email switch off, unsharing, removing your pages or deleting your account; have your data deleted, by deleting your account or asking us for anything deletion doesn't reach; and complain. Write to us first; if you are not satisfied, the Office of the Privacy Commissioner of Canada takes complaints at priv.gc.ca or 1-800-282-1376.
children
plan.tattoo is made for adults, and we don't knowingly collect data from children. If you believe a child has an account, tell us and we delete it.
security
Data travels over HTTPS. Passwords are handled by Clerk and never reach us. Private files are read only through our server; images are re-encoded on upload with their metadata removed; admin access is limited to named accounts. If a breach ever creates a real risk of harm to you, we tell you and the Privacy Commissioner, as PIPEDA requires.
changes
When this page changes we post the new version here with the date. If we start keeping something new or using data for a new purpose, we ask first where the law requires it.
questions
Moirai Digital, Ontario, Canada. info@moiraidigital.com