Privacy Policy

This is an information site. It sets no cookies, runs no accounts and uses no tracking or advertising scripts. The one place it collects anything is the concept form described below, and only if you fill it in.

Hosting

The site is hosted by Vercel Inc. When you open a page, technically necessary data (IP address, time, page requested, browser) is processed in server logs. Legal basis under the GDPR is Art. 6(1)(f).

The concept form

Every meaning page carries a form where you can describe what sits behind the tattoo you are considering and get an answer by email. If you send it, we store what you wrote, the optional placement and style notes, your email address, which page you sent it from, and the country and region the request came from. No IP address is stored.

To keep the form from being flooded, your IP address is turned into a one-way hash on arrival and counted against a short-lived limit. The hash cannot be turned back into an address, the address itself is never written down, and the counter is deleted within minutes. Legal basis is our legitimate interest in a working form, Art. 6(1)(f) GDPR.

Legal basis is your consent, Art. 6(1)(a) GDPR. People sometimes describe illness, mental health, bereavement or recovery in these messages. That is special category data under Art. 9 GDPR, and the basis for it is your explicit consent, Art. 9(2)(a), given by ticking the box on the form. You decide how much to write, and a vague description is enough to get a useful answer.

Submissions are stored with Supabase on servers in the EU (Frankfurt). They are used to answer you and, in aggregate and without your email address or your text, to see which regions have demand for which designs. They are not sold and not passed to third parties.

Answers are drafted with the help of an AI model and read by a person before they are sent. Messages that touch on suicide, self-harm or abuse are never answered automatically.

You can withdraw your consent at any time with no reason given, and we then delete the message. Withdrawal does not affect what was lawful before it. Submissions are deleted at the latest 24 months after the last contact. You also have the rights to access, rectification, erasure, restriction, data portability and to complain to a supervisory authority.

Outbound links

Links to tathood.com carry UTM parameters so the referring page is visible in their analytics. No personal data is passed.

Controller

[Name, address, email, see the imprint]