Privacy Policy
BrushCatalog is built to work without knowing who you are. This policy describes exactly what the App and the Site do — and do not do — with your information.
The short version
- No account, no sign-up. The app works without asking who you are.
- We don't collect personal data. No name, email, phone number, location, contacts, photos or advertising identifier.
- Your favorites stay on your device. They are never sent to us.
- No third-party advertising or tracking SDKs. We do not track you across other apps or websites, and we do not sell or share data.
- The only data that reaches a server is what any internet request carries — an IP address and device type in short-lived hosting logs, plus Apple's anonymous crash and usage statistics if you opted in on your device.
Who we are and what this covers
BrushCatalog is an independent showcase of brushes for Procreate, Photoshop, Clip Studio Paint & Krita, run by a solo developer. This Privacy Policy explains what happens to your information when you use the BrushCatalog app for iPhone and iPad (the "App") and the website brushcatalog.com (the "Site"). If you have questions, write to nika@brushcatalog.com.
Data we do not collect
The App has no user accounts and no forms. We do not ask for, receive or store:
- your name, email address, phone number or postal address;
- your precise or approximate location;
- contacts, photos, calendar entries, health data or any other content on your device;
- the Apple advertising identifier (IDFA) or any other identifier used to track you across apps and websites;
- payment details — any purchase is handled entirely by Apple's App Store, which does not share your card details with us.
We do not use advertising networks, data brokers, social-media SDKs or fingerprinting, and we never sell, rent or share personal information.
Data stored on your device
To make the App useful, a few things are saved locally on your iPhone or iPad:
- Favorites — the brush sets you mark to revisit later;
- Preferences — such as the app or style filter you used last;
- Cache — a copy of the catalog and preview images so the App opens fast and works with a poor connection.
This data never leaves your device through us. If you use Apple's iCloud Backup or iCloud sync, Apple may back up the App's data together with the rest of your device under Apple's privacy policy. Deleting the App deletes all of it; you can also clear favorites from inside the App.
Data processed automatically
Catalog updates. The App downloads the brush catalog and preview images from brushcatalog.com. Like any web request, this transmits your device's IP address, device type and operating-system version to our hosting provider (Cloudflare, Inc.). These standard server logs are used only to keep the service running and secure, are not linked to you as a person, and are retained for a short period (typically under 30 days) before being deleted automatically.
Third-party preview images. A few preview images are loaded directly from the author's own site rather than from us. In that case the author's server receives your IP address as part of the request, governed by that site's privacy policy. The App does not send referrers or identifiers with these requests.
Crash reports and app analytics from Apple. If you have enabled "Share With App Developers" in your device's Analytics & Improvements settings, Apple may send us aggregated, anonymous crash logs and usage statistics (for example how many devices opened a screen). Apple describes this data in its own privacy policy; it contains no name, email or other identifier, and you can turn it off at any time in Settings → Privacy & Security → Analytics & Improvements.
The App contains no third-party analytics or crash-reporting SDK. If that ever changes, we will update this policy and the App's privacy label on the App Store before the change ships.
The website
The Site works the same way as the App, with two additions:
- Google Analytics 4. We use Google Analytics to understand which pages are visited. It sets first-party cookies and processes IP addresses only transiently (Google Analytics 4 does not log or store them). We do not enable Google Signals or advertising features, and we do not share this data with anyone else. You can block it with a browser setting, a content blocker, or the Google Analytics opt-out add-on.
- Local storage. Favorites you save on the Site are kept in your browser's local storage and never sent to us. Clearing your browser's site data removes them.
The Site is hosted by Cloudflare, whose edge servers keep the same short-lived security logs described above.
Links to other sites
Every brush set in the catalog links to its author's page — on Gumroad, Procreate Folio, Creative Market, Clip Studio Assets, the author's own shop and so on. Those sites are run by other people and have their own privacy policies and terms; once you leave the App or the Site, this policy no longer applies. We do not control what they collect and we receive nothing back from them about you.
Children
The App and the Site are general-audience services and are not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. Because the App collects no personal information at all, there is nothing for a parent to review or delete on our side; if you believe a child has sent us personal data by email, contact us and we will delete it.
Your rights and choices
Depending on where you live — for example under the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA) or similar laws — you may have the right to access, correct, delete or export personal data, to restrict or object to its processing, and to complain to a supervisory authority. You may exercise these rights by emailing nika@brushcatalog.com; we will answer within 30 days and never charge for it.
In practice, because we hold no personal data about you, most of these rights are yours to exercise directly: delete the App (or clear its data) to remove everything it stored, and clear your browser data to remove anything the Site stored. We do not "sell" or "share" personal information as those terms are defined under California law, and we do not use it for targeted advertising, so there is nothing to opt out of.
If you write to us by email, we keep the correspondence only as long as needed to handle your request and then delete it.
Security and retention
The App and the Site talk to our servers over HTTPS only. Hosting logs are retained for a short period and deleted automatically; we keep no databases of users because there are none. No system is perfectly secure, but the best protection is simply not having your data — which is the approach we have taken.
International transfers
Our hosting provider operates servers around the world, so the technical data described above may be processed outside your country, including in the United States. Cloudflare provides safeguards for such transfers (including standard contractual clauses) and participates in the EU-US Data Privacy Framework.
Changes to this policy
If we change how the App or the Site handles data, we will update this page and the "Last updated" date at the top, and — for anything material — say so inside the App and in the App Store release notes before the change takes effect. Earlier versions are available on request.
Contact
Privacy questions, requests and complaints: nika@brushcatalog.com. This policy is also linked from the App's settings screen and from the App Store listing.