Privacy policy
This policy explains what personal information prisonpicasso.com collects, why, and what you can do about it. It covers the website, the store and the streaming rentals.
Who we are
This site is operated by Prison Picasso. For any privacy question, or to exercise a right described below, email notifications@prisonpicasso.com.
What we collect
- Account and order data: name, email address, billing and shipping address, phone number if you provide it, and the items and rentals you buy.
- Payment data: handled by our payment processors. We receive a confirmation, the amount, the last four digits and the outcome. We never see or store your full card number.
- Streaming data: which title you rented, when you played it, playback position, device and session identifiers, and IP address. This is how device limits, expiry and fraud checks work.
- Technical data: IP address, browser and device type, pages viewed, and cookies needed to keep you signed in and keep your cart working.
- Messages: anything you send us by email or the contact form.
Cookies
We use cookies that are required for the site to function: session and sign-in cookies, cart cookies, and a cookie that remembers that you confirmed the age notice. Analytics, where enabled, is configured to avoid identifying individual visitors. You can block cookies in your browser, but the store and player will stop working.
Who we share it with
- Payment processors (Stripe and/or PayPal) to take payment and handle disputes.
- Streaming and hosting providers that deliver the video files and run the site.
- Email and shipping providers that send order receipts and deliver physical purchases.
- Authorities where the law requires it, or where we must defend a legal claim.
We do not sell personal information, and we do not share it for advertising.
How long we keep it
- Order and tax records: as long as tax and accounting law requires.
- Rental and playback records: up to 24 months, for support, fraud prevention and dispute defence.
- Contact messages: up to 24 months.
- Account data: until you ask us to delete it, subject to the records above.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it, by emailing the address above. If you are in California, the EU or the UK, you also have the rights those laws give you, including the right to object to certain processing and to complain to your data protection authority. We will not treat you differently for exercising a right.
Children
This site is for adults. We do not knowingly collect information from anyone under 18 and will delete it if we learn we have.
Changes
If this policy changes materially we will post the new version here with a new date.
Last updated: 9 November 2026.
