Privacy Policy
Last updated: 31 October 2026
Death to Paper ("we", "us", "our") provides digital consent forms, scheduling, and client management tools for tattoo arists, piercers, and other body art professionals. This policy explains what personal data we collect, why we collect it, and how it's handled.
Who's who: controller and processor
When you sign up as an artist, you're the data controller for the information you hold about your clients - things like their name, contact details, appointment history, and signed consent forms. Death to Paper acts as your data processor: we store and process that data on your behalf, under your instructions, to provide the service.
Information we collect
We collect a few different kinds of data:
- Account data: your name, business name, email address, and password (stored as a salted hash - we never see it in plain text).
- Client data you add: client names, contact details, appointment records, and any consent form questions and answers you configure.
- Consent submissions: the answers and signatures your clients provide when completing a consent form.
- Billing data: if you upgrade to Pro, payment is handled entirely by Stripe. We never see or store your full card details.
- Technical data: basic server logs (IP address, browser type, timestamps) used for security and troubleshooting.
How we use it
- To provide and operate the service you've signed up for.
- To process payments and manage subscriptions.
- To send essential account and service emails (password resets, receipts, service notices).
- To keep the platform secure and diagnose issues.
We don't sell your data, and we don't use it for advertising.
Where your data lives
We use a small number of trusted third-party services to run Death to Paper, each only processing the data needed to do their job:
- Amazon Web Services (S3) - secure file storage for uploaded and generated files, such as signed consent PDFs.
- Amazon SES - sends transactional emails (password resets, notifications).
- Stripe - handles subscription billing and payment processing.
- Cloudflare - provides security and performance for our website.
Cookies
We only use the cookies the service needs to work: to keep you signed in, to protect forms against cross-site request forgery, and to show you messages after you save something. We don't use advertising, analytics or tracking cookies. Our Cookie Policy lists each one. If you choose light or dark while signed out, that choice is remembered in your own browser and never sent to us.
How long we keep data
We keep account and client data for as long as your account is active. If you close your account, we'll delete or anonymise your data within a reasonable period, except where we're required to retain it for legal, tax, or fraud-prevention purposes.
Your rights
You can access, correct, export, or request deletion of your data at any time. Artists manage this directly for their own account and clients from within the app; if you need anything else, get in touch and we'll sort it out.
Changes to this policy
We may update this policy from time to time. If we make material changes, we'll let you know by email or via a notice on the site.
Contact us
Questions about this policy or your data? Email us at [email protected].