WEBSITE PRIVACY
SprayAR website · Updated 10 October 2026
This notice describes the new SprayAR website and its shared painting wall. The released iOS app has a separate existing privacy policy. Browser experiments and future app features are not automatically included in the released app.
Who operates this website
Pascal Schwendener, Burghofstrasse 88, 40223 Düsseldorf, Germany. Contact: support@sprayar.com or pascalsender@gmx.de.
Browsing the facade
The page serves its fonts, textures, models and videos from this website. It does not install advertising cookies, analytics scripts or social-media trackers. Your browser necessarily sends technical connection data, including your IP address, to our hosting provider, 1blu, to deliver and secure the site. Hosting access and error logs are managed by the provider; this notice does not promise that hosting logs are disabled.
Painting is public
When you activate Paint and draw, compressed paint deposition coordinates, pigment colour and opacity, a random batch identifier, facade level and submission time are sent to our server. 3D tube submissions additionally store their path, profile, radius, orientation and finish. Other visitors can see, download and paint over the wall and its shared tubes. No account, name or email address is required. Do not paint personal information. Please do not submit hateful, abusive or illegal material.
Marks remain in the shared artwork until removed through moderation, a removal request or retirement of the wall. Painting over a mark hides it visually; it does not delete its stored stroke. The wall has a finite storage capacity. It is not an archival storage service, and permanent retention is not guaranteed.
Storage on your device
Unsent strokes are temporarily kept in your browser's local storage so a connection failure does not immediately lose them. They are retried automatically while the page is open and removed from that queue after the server confirms them. Clearing the website's browser data removes unsent strokes. Saved public strokes require a separate removal request.
Abuse prevention and reports
The paint service uses a keyed, changing hash derived from the connection IP to limit excessive submissions. The application does not store a raw IP address with your paint. Rate-limit records expire after an hour and are removed on a subsequent write. A report contains a reason category, facade level and submission time. Reports are available to the operator for review; they are not displayed publicly. Reports are removed when resolved or as the finite report queue turns over.
Use Report paint on the facade or email support to request review. Include the wall section and an approximate time or screenshot if possible. Reports do not automatically remove other visitors' artwork.
Why this data is processed
We process submissions to provide the shared artwork you choose to create, and technical data to operate and protect the website. Where personal data is involved, the legal basis for this public creative service and abuse prevention is our legitimate interest in operating a secure, collaborative artwork under Article 6(1)(f) GDPR. Contact requests are handled to respond to you and, where relevant, take steps requested before a contract under Article 6(1)(b). We do not use this facade's strokes for advertising profiles or automated decisions about you.
Optional linked experiences
Choosing Aerosol Lab loads it inside the page, sending connection data to pascalsender.com. The facade uses locally hosted spray simulation code and does not connect to the Lab automatically. Choosing SprayAR World loads it inside the page, connecting you to some-sender.gotdns.ch. The back button unloads the embedded experience; an additional link opens it separately. Its recorded walkthrough on this page is served from this website. Lab and World run their own controls and storage, separate from this facade. Clicking an App Store or other external link connects you to that destination; its own privacy terms apply. This facade does not request camera, microphone or location access.
The optional Live community window embeds the existing collected-painting and Hall of Fame pages from pascalsender.com, or the original SprayAR leaderboard. These pages are loaded only after you open that window; your browser then connects to their host. Closing the window unloads its embedded page.
Your choices and rights
Where GDPR applies, you may request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. Contact the operator to exercise these rights. Because painting does not require an account, we may need help identifying the relevant submission. You may also complain to a supervisory authority, including LDI Nordrhein-Westfalen. The European Commission explains individual data-protection rights.
The app and future releases
This notice does not replace the released app's policy or Apple's App Privacy disclosures. Those documents need to reflect the actual data flows of each app release. The aerosol engine, Forge collection and spatial tool development on this page are labelled according to their current status.