Privacy Policy

Last updated 23 September 2026

PaulBoothArt.com is a static archive of Paul Booth's work. It has no accounts, no shopping cart and no comment system. The personal information it collects is what you choose to send through the tattoo inquiry form, and the only measurement it runs is a cookieless visit counter that cannot identify you.

The tattoo inquiry form

The inquiry form is how you reach Paul about a project, and it asks for more than a normal contact form does, because a tattoo project cannot be evaluated without it. You provide your name, email address and, if you choose, a phone number and preferred contact method. You also describe the body area, the project concept, your timing and availability, an optional estimated budget, and you acknowledge the deposit terms. A reference image is required — a JPG, PNG, WEBP or PDF of up to 10 MB.

Please send only what is needed to evaluate the project. Reference images of a body area can be personal, and there is no need to include your face, identifying marks or anything else the project does not require.

When you submit, the form is passed to a small service run for this site, which formats it and emails it to Paul, with your attachment included, through Resend, an email delivery provider. Your email address is set as the reply address so Paul can answer you directly.

There is no database and no gallery of submissions. Your inquiry is not stored in any system beyond the email itself, which stays in Paul's mailbox for as long as the project conversation is live, and in Resend's delivery logs under their own retention policy. Your inquiry and your reference images are used to evaluate and discuss your project and for nothing else. They are not published, not used as portfolio or promotional material without asking you first, never sold, and not added to a mailing list.

To keep the form from being abused, the service briefly holds your IP address in memory to enforce a per-sender limit, and records it in its server logs if a submission is rejected as spam. Those counters expire within the hour and the logs are operational records, not a visitor profile. The service runs on Railway, which hosts it and retains those logs on its own schedule.

Analytics

This site uses Cloudflare Web Analytics to count visits and see which pages people actually look at. It is deliberately the least invasive option available: it sets no cookies, uses no local or session storage, does not fingerprint your device and does not follow you to any other website. What is reported back is aggregate — page views, referring sites, broad location such as country, browser and device type — and it is not tied to you as an individual.

Serving the measurement script means your browser contacts Cloudflare, and Cloudflare processes the request, including your IP address, to derive that coarse information. Cloudflare states that it does not use the IP address to build a profile or to track visitors across sites. Their handling is governed by the Cloudflare Privacy Policy.

Cookies and browser storage

This site sets no cookies of its own and stores nothing in your browser's local or session storage. There is no advertising script, no tracking pixel and no visitor profiling. Two embedded players are the exception, and they belong to other companies — see below.

What third parties may collect

Some parts of the site are delivered by other companies. When your browser loads that content, it necessarily contacts those companies directly, and they may record technical information such as your IP address, browser version and the page you were viewing. That processing is governed by their privacy policies, not this one.

• GitHub Pages hosts this site. GitHub's servers log requests, including IP addresses, in order to serve pages and protect against abuse. See the GitHub Privacy Statement.
• Cloudflare provides the analytics described above.
• Railway and Resend process and deliver inquiry form submissions, as described above. They are involved only if you send the form.
• Spotify supplies the player in the Music section. That player is loaded by Spotify as soon as you reach that part of the page, and unlike the video embeds it is not a cookieless one: Spotify may set cookies and use storage in your browser, and may associate playback with your Spotify account if you are signed in. See the Spotify Privacy Policy.
• YouTube supplies the embedded videos. Embeds use the youtube-nocookie.com domain, which withholds personalised advertising cookies until you press play. Once you play a video, YouTube may set cookies and record playback. See Google's Privacy Policy.
• Google Fonts serves the typefaces. Requests to fonts.googleapis.com and fonts.gstatic.com expose your IP address to Google.

Links to other sites

This site links to PaulBooth.ai and to social profiles and streaming services elsewhere. Once you follow a link, the destination's own privacy policy applies.

Children

This site is not directed at children, and no information is knowingly collected from anyone under 18. Tattoo inquiries are accepted from adults only. Much of the artwork depicts mature and dark themes and is intended for an adult audience.

Your rights

The analytics are aggregate and hold nothing that identifies you, so there is nothing there to retrieve or erase. If you have sent an inquiry, you can ask for a copy of what was received, ask for a correction, or ask for the message and its reference images to be deleted from Paul's mailbox. Write to the address below and the request will be answered. Depending on where you live, you may also have the right to complain to your local data protection authority.

Changes

This policy may be updated as the site changes. The date at the top always reflects the current version.

Contact

Questions about this policy, or requests about your information: lastritestattoo@gmail.com