Privacy Policy

Pigment is a guide to art exhibitions. You read it without an account, and it is built to know as little about you as it can. This page covers the site at pigment.guide and the Pigment app for iPhone.

The short version

  • There is no account and no sign-in.
  • There are no ads, and nothing here tracks you across other sites or apps.
  • We do not sell or rent anything about you.
  • What you save in the app stays on your phone.
  • We keep an email address only if you give us one: to hear when a city opens, or to ask for a listing to be changed or taken down.

Who we are

Pigment is a project of CanvasCandy, run by Emerge Labs, LLC. For anything on this page, write to privacy@pigment.guide.

The app

What stays on your phone. The shows you save, your plan for a day out, the places you have marked as visited and the city you chose are kept on your device. They are not sent to us, and deleting the app deletes them.

Asking for a city. The app lists cities the guide has not opened yet. If you ask to be told when one opens, the email address you type and the city are sent to us and kept on that city’s waitlist, described under “City waitlists” below. Nothing else from the app goes with them, and the address is not tied to what you save or where you are.

Location. If you allow it, the app uses your location while it is open, to show where you are on the map and to start a route from where you are. When you ask for a route, the start point and the stops are sent to pigment.guide, which passes them to a routing service (Valhalla, run by FOSSGIS) to get street times. A start address you type is looked up through OpenStreetMap’s Nominatim service in the same way. Nothing identifying you is sent with them, and we do not keep them. You can turn location off in Settings and the app still works.

Reminders. Reminders for saved shows are set on your phone and delivered by iOS. No server sends them, and we do not hold a notification address for your device.

The map and pictures. Map tiles are loaded from OpenFreeMap, and pictures from our image host on Cloudflare. As with any request over the internet, those services see your IP address and what was asked for.

Updates. The app checks with Expo, whose tools it is built on, for a newer version of itself. That request carries the app’s version and your device’s platform, not anything about you.

Requests about a listing

If you use the form to ask for a listing to be changed or taken down, we keep what you send: your name, your email address, which listing, who you say you are, and your message. We email you a link to confirm the request is yours, and use the address after that only to reply. We keep the request as a record of what was asked and what we did. Write to us and we will delete it.

City waitlists

If you join the waitlist for a city we have not opened yet, on the site or in the app, we keep your email address and the city. We use them for one thing: to email you when that city opens. We do not use the address for anything else or pass it to anyone to use for themselves. Every email we send has a link that takes you off the list, or you can write to us and we will remove you.

The site

A visitor cookie. The site sets one first-party cookie, pg_vid, holding a random number that lasts up to 400 days. It lets us count how many different people looked at a listing, rather than how many times it was loaded. Before anything is stored, the number is scrambled with a secret key, so what we keep cannot be traced back to your browser.

Your area. When you choose an area, the site sets a second first-party cookie, pg_area, holding only that area’s name, such as “portland”. It is there so the guide opens on your area next time. It holds nothing that tells your browser from anyone else’s, we keep no record of it, and it is renewed each time you visit so that it lasts. If you have not chosen, the site may open on the area nearest the rough location your internet address suggests; that guess is not stored.

Page counts. We use Vercel Web Analytics to see which pages are read. It uses no cookies and reports totals, not individuals.

Who handles data for us

The site runs on Vercel, the listings and waitlists are stored with Supabase, pictures are served by Cloudflare, and the email telling you a city has opened is sent through Resend. Like any web host, they keep short-lived logs of requests, which include IP addresses. They act on our instructions and not for purposes of their own.

Other people’s sites

Listings link to galleries, artists and organisers, and the app hands directions to Apple Maps. Once you follow a link, their privacy policies apply, not this one.

Children

Pigment is not directed at children under 13, and we do not knowingly collect information from them.

Your choices

You can ask what we hold about you, or ask us to delete it, by writing to privacy@pigment.guide. In practice that is a waitlist email address, if you gave us one. You can clear either cookie in your browser at any time.

Changes

If this policy changes, the new version will be posted here with a new date. Last updated October 11, 2026.