Privacy Policy

Last updated 23 October 2026

PaulBoothArt.com is a static archive of Paul Booth's work. It has no accounts, no shopping cart and no comment system. The personal information it collects is what you choose to send through the tattoo inquiry form. To understand how the site is used, it also runs a cookieless visit counter and, where you allow it, a session-recording tool that captures how pages are scrolled and clicked, with the inquiry form hidden from it entirely.

The tattoo inquiry form

The inquiry form is how you reach Paul about a project, and it asks for more than a normal contact form does, because a tattoo project cannot be evaluated without it. You provide your name, email address and, if you choose, a phone number and preferred contact method. You also describe the body area, the project concept, your timing and availability, an optional estimated budget, and you acknowledge the deposit terms. A reference image is required — a JPG, PNG, WEBP or PDF of up to 10 MB.

Please send only what is needed to evaluate the project. Reference images of a body area can be personal, and there is no need to include your face, identifying marks or anything else the project does not require.

When you submit, the form is passed to a small service run for this site, which formats it and emails it to Paul, with your attachment included, through Resend, an email delivery provider. Your email address is set as the reply address so Paul can answer you directly.

There is no database and no gallery of submissions. Your inquiry is not stored in any system beyond the email itself, which stays in Paul's mailbox for as long as the project conversation is live, and in Resend's delivery logs under their own retention policy. Your inquiry and your reference images are used to evaluate and discuss your project and for nothing else. They are not published, not used as portfolio or promotional material without asking you first, never sold, and not added to a mailing list.

To keep the form from being abused, the service briefly holds your IP address in memory to enforce a per-sender limit, and records it in its server logs if a submission is rejected as spam. Those counters expire within the hour and the logs are operational records, not a visitor profile. The service runs on Railway, which hosts it and retains those logs on its own schedule.

Analytics

This site uses Cloudflare Web Analytics to count visits and see which pages people actually look at. It is deliberately the least invasive option available: it sets no cookies, uses no local or session storage, does not fingerprint your device and does not follow you to any other website. What is reported back is aggregate — page views, referring sites, broad location such as country, browser and device type — and it is not tied to you as an individual.

Serving the measurement script means your browser contacts Cloudflare, and Cloudflare processes the request, including your IP address, to derive that coarse information. Cloudflare states that it does not use the IP address to build a profile or to track visitors across sites. Their handling is governed by the Cloudflare Privacy Policy.

Session recordings and heatmaps

This site also uses Microsoft Clarity to see how the pages are actually used. Clarity records how you move through a page — scrolling, clicks, taps and mouse movement — and turns that into heatmaps and replayable session recordings, along with technical details such as your browser, device type, screen size and approximate location, which Microsoft derives from your IP address. These are used only to find what is confusing, broken or overlooked on the site.

The tattoo inquiry form is completely hidden from Clarity: nothing you type into it, select in it or attach to it appears in any recording.

Clarity uses cookies so that it can tell a returning visitor from a new one, and so it only runs if you allow it — see the next section. Clarity data is processed and stored by Microsoft under the Microsoft Privacy Statement. This site runs Clarity for analytics only: its advertising features are switched off, and recordings are not combined with inquiry submissions.

Cookies and your choices

Two things on this site set cookies: Microsoft Clarity and the Spotify player in the Music section. Neither is needed for the site to work.

• If you are in Europe (the EU and EEA, the UK and Switzerland, judged from your device's time zone), you are asked first, and neither loads unless you accept.
• Everywhere else, they load by default, and you can turn them off at any time. If your browser sends a Global Privacy Control signal, that is treated as a refusal wherever you are.

If you decline, Clarity is not loaded at all, and the Spotify player is replaced by a button that loads it only if you press it. If you accept, Clarity sets _clck, which recognises your browser for up to a year, and _clsk, which links the pages of one visit and expires after a day. It also keeps a little data in session storage that is cleared when you close the tab, and Microsoft may set its own cookies on its own domains, such as clarity.ms and bing.com, which this site cannot remove. Spotify's cookies are described under the third parties below.

Your choice is remembered in your browser's local storage, which is the one thing this site stores for itself. You can change it whenever you like: change your cookie choice. Withdrawing consent removes Clarity's cookies from this site.

There is no advertising script and no tracking pixel.

What third parties may collect

Some parts of the site are delivered by other companies. When your browser loads that content, it necessarily contacts those companies directly, and they may record technical information such as your IP address, browser version and the page you were viewing. That processing is governed by their privacy policies, not this one.

• GitHub Pages hosts this site. GitHub's servers log requests, including IP addresses, in order to serve pages and protect against abuse. See the GitHub Privacy Statement.
• Cloudflare provides the analytics described above.
• Microsoft provides Clarity, the session recording and heatmap tool described above.
• Railway and Resend process and deliver inquiry form submissions, as described above. They are involved only if you send the form.
• Spotify supplies the player in the Music section. It loads only as described under cookies above. Once loaded, Spotify may set cookies and use storage in your browser, and may associate playback with your Spotify account if you are signed in. See the Spotify Privacy Policy.
• YouTube supplies the embedded videos. Embeds use the youtube-nocookie.com domain, which withholds personalised advertising cookies until you press play. Once you play a video, YouTube may set cookies and record playback. See Google's Privacy Policy.
• Google Fonts serves the typefaces. Requests to fonts.googleapis.com and fonts.gstatic.com expose your IP address to Google.

Links to other sites

This site links to PaulBooth.ai and to social profiles and streaming services elsewhere. Once you follow a link, the destination's own privacy policy applies.

Children

This site is not directed at children, and no information is knowingly collected from anyone under 18. Tattoo inquiries are accepted from adults only. Much of the artwork depicts mature and dark themes and is intended for an adult audience.

Your rights

The Cloudflare analytics are aggregate and hold nothing that identifies you. Clarity recordings are tied only to a random cookie ID, not to your name or email, and you can stop them at any time by changing your cookie choice above or by using a content or tracker blocker. If you have sent an inquiry, you can ask for a copy of what was received, ask for a correction, or ask for the message and its reference images to be deleted from Paul's mailbox. Write to the address below and the request will be answered. Depending on where you live, you may also have the right to complain to your local data protection authority.

Changes

This policy may be updated as the site changes. The date at the top always reflects the current version.

Contact

Questions about this policy, or requests about your information: lastritestattoo@gmail.com