Cookie & Storage Policy

The short version

Ink-It does not set any cookies of its own, and it does not use tracking, analytics or advertising cookies or scripts — on the website or in the apps. There is no profile of what you look at, and nothing is shared with advertisers.

To work, the website stores some data in your browser with the browser’s own storage (localStorage, sessionStorage and IndexedDB, not cookies). It is needed to give you the service you asked for, so it is saved without a consent banner. Our notice just tells you so — and the one optional thing, the map, only loads after your click.

What the website stores in your browser

Everything below stays on your device. Nothing here is used to track you, and none of it is sent to advertisers.

• Sign-in (localStorage “inkit-auth”) — keeps you signed in. Needed for accounts. Stays until you sign out or clear site data.

• Your library (IndexedDB “inkit-state” with the entry “inkit-store”, and “inkit-images”) — your references, photos, sketches, placements, saved studios and profile. Encrypted with a key kept in this browser (IndexedDB “inkit-keys”). Needed so the app works at all, also offline. Stays until you delete it or clear site data.

• Sync state (IndexedDB “inkit-meta”) — only if you use sync: what was synced when. Stays until you turn sync off or clear site data.

• Your choices (localStorage “inkit-osm-consent”, “inkit.fold.…”, “inkit-storage-notice”) — whether the map may load, which sections you folded away, and that you saw the cookie notice. A convenience you set yourself.

• Short-lived notes (sessionStorage “inkit-pending-signup”, “inkit-announcement-dismissed”) — carry a sign-up through the confirmation email and remember you dismissed a notice. Gone when you close the tab.

What the apps store

The iOS and Android apps use no cookies. They keep your library encrypted on the phone, your sign-in in the phone’s secure storage and a few settings, for the same reasons as above. App Store and Google Play have their own data practices for downloading and paying for the app.

Third parties you may meet

OpenStreetMap (studio map). Only after you click “Load the map” (or switch it on above): your browser then requests map pictures directly from OpenStreetMap’s servers, which see your IP address and the area you look at. Ink-It does not send them anything else. You can switch it off any time.

Stripe (paying on the web). When you subscribe you are sent to a Stripe page. Stripe sets its own cookies and similar technologies there, as described in Stripe’s privacy and cookie policy, to process the payment and prevent fraud. Ink-It never sees your card details.

Supabase and Vercel. Ink-It’s backend (Supabase, Frankfurt) and hosting (Vercel) receive the technical data every web request carries — such as IP address, time and browser type — in short-lived server logs for security and operation. They do not set cookies for Ink-It, and the data is not used for tracking.

Fonts are served by Ink-It itself; no request goes to Google Fonts. Links to other websites (for example a studio’s Instagram) leave Ink-It, and the other site’s policy applies from there.

Legal basis

Storing and reading information on your device is allowed without consent where it is strictly necessary for a service you explicitly asked for (section 25(2) no. 2 TDDDG). That covers the items above. Personal data in them is processed to provide the service (Art. 6(1)(b) GDPR) or, for security, on our legitimate interest (Art. 6(1)(f) GDPR). The map is the one case that depends on your choice (Art. 6(1)(a) GDPR), which you can take back at any time. More in the privacy policy.

Your control

You can delete everything the website stored at any time: in your browser’s settings, clear the site data for ink-it.lenfi.uk. Note that this also removes your encrypted library from this browser — export a backup first, or turn on sync. Signed-in data on our servers is removed by deleting your account.

You can also tell your browser to block storage; the app then cannot keep you signed in or save your library, and parts of it will not work.

If this changes

If Ink-It ever wants to use something that needs your consent — for example analytics — it will ask first, before anything is loaded, and this policy and the notice will be updated. The notice appears again after a change.

Contact

Questions? Write to support.lenfi@lenfi.uk. The provider's name and address are in the imprint.