Effective date: October 10, 2026.
The Art Rag is operated by Jeremy Zlabis, operating as The Art Rag, in Toronto, Ontario ("we"). This page explains what we collect, why, and how long we keep it. Questions go to hello@theartrag.ca. Jeremy Zlabis is responsible for privacy at The Art Rag.
When you browse. Our web server keeps a standard access log (your IP address, the page requested, the time, and the result). We delete it after 7 days. We use it to keep the site running and to stop abuse.
When you use the chat.
When you subscribe. We keep your email address, your Stripe customer and subscription IDs, your subscription status, when you signed up, and the "how do you come to art" choice you make in Settings. We use these to run your account and your subscription.
Sign-in. We sign you in by email link, sent through our email provider, Resend. Sign-in links and sessions are stored in scrambled (hashed) form and expire. A session lasts 30 days.
Security alerts. If our systems detect an attack or abuse, the alert may record the IP address involved. We keep these alerts for up to 90 days unless we need them longer to deal with a specific incident.
We use one cookie, rag_session, and only after you sign in. It keeps you signed in for up to 30 days and is removed when you sign out. Visitors who aren't signed in get no cookies.
Two small items are saved in your own browser and are not sent to us on their own:
rag_profile: your "how do you come to art" choice, kept until you clear it.rag_entry: a question passed from a listing to the chat page, deleted as soon as it's used.Stripe sets its own cookies on its own website when you check out or manage billing.
Stripe, Resend and ImprovMX may process data outside Canada, including in the United States, where it may be accessible under local law. We don't sell or rent personal information, and we don't share it for advertising.
You can ask to see the personal information we hold about you, have it corrected, or have your account deleted. Write to hello@theartrag.ca and we'll reply within 30 days. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).
The Art Rag is intended for adults. Subscriptions are available only to people who have reached the age of majority where they live.
If we change this policy, we'll update the date at the top of this page. For significant changes, we'll email subscribers before the change takes effect.