Privacy Policy

Effective date: April 28, 2026 — Version 2.0

1. Who we are

This Privacy Policy applies to ARTLittle, operated by 88 Degree Studio, a sole-proprietor / business operating in Malaysia.

Privacy contact: artlittle.com@gmail.com

2. What we collect

  • Account data: email, username, display name, hashed password.
  • Profile data: your avatar configuration, uploaded textures, wardrobe.
  • Communications: direct messages (content + metadata), voice messages (audio files), call metadata (caller, callee, timestamp, duration, type). We do not record the audio or video of live voice/video calls.
  • Content you create: graffiti paintings, Time Vault messages, social posts, screenshots, uploaded images/videos/audio.
  • Technical data: IP address, browser, device, cookies, session tokens.
  • Location data (only with your permission, during active AR mode): GPS coordinates.
  • Media permissions (only when you grant them): microphone and camera access during calls.
  • Purchase data (if you buy something): billing details, order history (processed via ecommerce and our payment processor).
  • Push tokens (only if you enable push notifications).

3. How we use it

  • To operate your account and deliver the ARTLittle service.
  • To deliver messages and calls to the recipients you choose.
  • For moderation and abuse handling — including metadata review of messages and calls when a complaint is raised.
  • To process purchases and meet tax obligations.
  • To improve the platform (analytics, bug reports).
  • To detect fraud, spam, and unauthorised access.
  • To comply with legal obligations.

4. Legal basis (EU/UK users)

  • Your consent — optional features, marketing, push notifications.
  • Performance of contract — account and purchases.
  • Legitimate interests — security, moderation, platform improvement.
  • Legal obligation — tax records, law-enforcement requests.

5. How long we keep it

  • Account data: while your account is active; deleted within 30 days of an account-deletion request (subject to legal holds).
  • Direct messages & voicemails: retained up to 180 days, then automatically deleted.
  • Call metadata: 90 days.
  • User-created content (graffiti, Time Vault, social posts): kept while your account is active, or until you delete it. Time Vault items follow their unseal date.
  • Purchase records: 7 years (Malaysian tax law).
  • Technical logs: up to 90 days.

6. Your content — copyright and licensing

You retain full copyright of everything you create on ARTLittle (graffiti, voicemails, Time Vault messages, social posts, painted avatars, uploaded media).

By using the platform, you grant 88 Degree Studio a non-exclusive, royalty-free, worldwide licence to host, store, display, and archive your content within ARTLittle so it works as intended, and to include screenshots of the platform (which may include your content) in our own marketing of ARTLittle.

For any other commercial use — merchandise, prints, NFTs, paid advertising campaigns featuring your specific work, or third-party licensing — we will contact you directly to ask permission and agree on terms (including payment / revenue share and credit). You are under no obligation to agree. If we cannot reach you within 30 days we will not use your work.

We always attribute the creator when we use content with permission. Your moral rights under Malaysian Copyright Act 1987 section 25 are respected.

7. Sharing & third parties

We do not sell your personal data.

We share limited data with:

  • Hosting / infrastructure providers (web hosting, WebRTC STUN servers) under confidentiality.
  • Payment processors (ecommerce, Stripe/PayPal) for transactions.
  • Google AdSense for advertising (anonymised signals only, where enabled).
  • Authorities, if legally compelled.

8. International transfers

Some services we rely on (Google AdSense, WebRTC STUN) process data outside Malaysia. Where applicable we rely on standard contractual clauses or equivalent safeguards.

9. Your rights

Under Malaysian PDPA 2010 (and, where relevant, GDPR for EU/UK users) you can:

  • Request a copy of data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your account and personal data (subject to legal retention).
  • Receive a machine-readable copy (data portability).
  • Withdraw consent where processing is consent-based.
  • Object to certain processing.

Email artlittle.com@gmail.com to exercise any right. We reply within 30 days.

You may also complain to the Personal Data Protection Commissioner of Malaysia (pdp.gov.my) or your local data-protection authority.

10. Specific feature disclosures

  • Voice & video calls: we do NOT record call audio or video. We log metadata (caller, callee, time, duration) for moderation only.
  • Voicemail / voice messages: audio is stored on our servers so the recipient can play it back. Files are deleted after 180 days. You or the recipient can delete sooner via the DM panel.
  • Graffiti Wall: paintings are public to all visitors of that wing. Snapshots are archived in the wall’s history, attributed to you.
  • Time Vault: your sealed message is stored until the unseal date you choose. After that it becomes public to wing visitors indefinitely.
  • Geolocation (AR mode): GPS is used only during active AR sessions. We do not persist coordinates unless you explicitly pin a location.

11. Cookies

We use cookies for authentication, preferences, and (optionally) Google AdSense. You can disable cookies in your browser; some features will stop working.

12. Security

Passwords are hashed with modern algorithms. The site runs on HTTPS. Access to your personal data is restricted to site administrators. No online system is 100% secure; if we detect a breach we will notify you in accordance with applicable law.

13. Children

ARTLittle is not intended for children under 13. If you believe a child has provided us data, email artlittle.com@gmail.com and we will delete it.

14. Changes to this policy

We may update this Privacy Policy. Material changes will require you to re-agree on your next sign-in. The effective date at the top identifies this version.

15. User-uploaded content disclaimer

ARTLittle hosts user-generated content (graffiti, voice messages, posts, screenshots, videos, avatar designs). We do not pre-screen or moderate this content in real time. We rely on user reports and post-hoc review. We are not responsible for content posted by other users — by using ARTLittle you accept that you may encounter content that you disagree with or find offensive. Report abuse via the channels in our Terms of Service or by emailing the contact below.

16. Contact

88 Degree Studio — artlittle.com@gmail.com