Last updated 28 July 2026
Privacy
This canvas is run by RAXXO Studios. It asks for no account and no address of its own: the only email involved is the one you give the checkout when you pay. It sets no analytics cookie, runs no advertising tag and embeds no third party tracker.
The operator's full name, postal address and VAT number are published in the Impressum, and the German Datenschutzerklaerung covers the shop and the checkout. This page covers what happens on the canvas itself. Where the two disagree about the checkout, the German notice wins.
What the canvas collects
The plot you place: title, link and image
This is the product. A plot is published on a public canvas, gets its own page, and is meant to be seen. It is published immediately, without prior review, and can be removed by hand afterwards if it breaks the one content rule. If someone later takes your plot over, your artwork stays visible in that plot's ownership history, which is the provenance the canvas is built on.
Legal basis: Article 6(1)(b), publishing the plot is the service.
Kept: For the life of the canvas, which has no end date. Ownership history is kept permanently: it is the provenance the product is built on, and removing an entry would falsify the record.
A hash of your IP address
Claims are rate limited and moderated, and abuse has to be recognisable across attempts. The address is hashed with SHA-256 and truncated before it is stored. The raw address is never written down.
Legal basis: Article 6(1)(f), keeping an open canvas usable and moderatable.
Kept: With the reservation it belongs to.
Your email address, when you buy or take over a plot
Payment happens on raxxo.shop through Shopify, not here. The order comes back with the address you paid with, and it is stored against your reservation so that support can reach you about that specific plot and so a lost plot link can be recovered.
Legal basis: Article 6(1)(b) for the sale, and the retention periods German commercial and tax law puts on order records.
Kept: As long as those statutory periods require.
How many visits your plot sent
Each plot page shows how many clicks its link has had, per day. The counter is a number per plot per day. No visitor identifier, no address and no cookie is involved, and nothing about the person clicking is stored.
Legal basis: Article 6(1)(f), showing a plot owner what their plot did.
Kept: With the plot.
What stays in your browser
The list of plots you have claimed is kept in your own browser storage so the canvas can show them back to you. It never leaves your device and the server never receives it. Clear your browser storage and it is gone, though your plots stay on the canvas.
While the canvas is still in pre-launch, one cookie holds the preview key that gets you past the holding page. It carries no personal data. There are no other cookies.
Who else handles it
The canvas runs on Vercel, which also stores the uploaded artwork, and its records live in a Neon Postgres database. Payments are taken by Shopify on raxxo.shop. If you opt in to the mailing list, your address goes to the RAXXO Studios list, which asks you to confirm by email before it sends you anything, and which you can leave in one click. Mail is sent through Resend. Each of these is a processor working on instructions, and some of them process data outside the EU under the standard contractual clauses. There is no advertising network and no analytics provider in this list, because the canvas uses neither.
Uploaded artwork is served from a public address. That is deliberate: a plot is meant to be seen. Do not upload anything you would not put on a billboard.
Your rights
You can ask for a copy of what is held about you, ask for it to be corrected or deleted, ask for processing to be restricted, object to it, ask for it in a portable form, and withdraw consent to the mailing list at any time without giving a reason. Withdrawing consent does not undo what was lawful before it.
Deleting a published plot means taking it off the canvas, including from the ownership history of any plot that later replaced it. Ask and it will be done. Records tied to a payment cannot be deleted before the statutory retention period ends, but they can be restricted so they are only kept, not used.
Write to help@raxxo.shop. You also have the right to complain to a data protection supervisory authority, in Germany the authority of the federal state where the operator is based, named in the Impressum.
The short version: one address, hashed, so the free plot stays one per person. Your artwork is public because that is the point. Nothing is tracked, nothing is sold, and the mailing list only ever gets you if you tick the box.
Back to the canvas