What we do with your child's art and your email.

Only what we need.

• — Your email address, if you give it to us.
• — The artwork file you upload.
• — Basic file metadata: filename, size, type, timestamp.
• — Optional: child's first name and age, if you choose to add them.

We do not ask for full names, addresses, phone numbers, or payment details.

To build the Wonder.

• — To contact you about your submission and the project.
• — To display selected artworks publicly as part of the Wonder.
• — First name and age may appear next to artwork. Nothing else.
• — We never sell your data. We never share your email.

Managed, private storage.

Submissions are stored in our managed backend. Uploaded files live in private storage with restricted access. The database uses row-level security so records are not publicly readable by default.

First name. Age. That's it.

Only a first name and age are ever shown publicly alongside a child's artwork. Full names, parent emails, and any other contact information are never displayed.

Remove or delete, anytime.

To remove an artwork, delete your submission, or ask what we hold about you, email team@sambarnett.art. We aim to respond within a few working days.

See what helps parents.

With your permission, PostHog and Microsoft Clarity show us the public page as you see it, including approved names, artwork, images, quotes, clicks, taps, scrolling and navigation. Form entries, private invitations, uploads and payment pages stay blocked. We do not identify you.

Sensible defaults.

• — Traffic served over HTTPS.
• — Row-level security on the database.
• — No secrets or private keys in frontend code.
• — Narrow permissions on storage and database roles.

Questions? Write to us.

Privacy or security questions: team@sambarnett.art