Effective date: August 18, 2026
Your privacy and sensitive information is important at THRY.ZIP. Theo Thierry / THRY.ZIP (“THRY.ZIP,” “we,” “us,” or “our”). This Privacy Policy explains how information is handled when you visit thry.zip. including its interactive graffiti wall.
Contact inquiries.
If you use our contact form, we collect the information you choose to provide, such as your name, email address, and message, so that we can receive, respond to, and manage your inquiry.
Graffiti wall.
When you use the graffiti wall, you may submit a drawing for review and possible public display. We process the submitted PNG together with technical submission metadata such as a submission identifier, content hash, image dimensions, file size, submission time, and processing status.
You may also leave an optional private comment with a graffiti submission. Comments are used only to help us review and understand submissions and are not displayed publicly. Please do not include sensitive personal information in a comment.
Graffiti itself is intended for possible public display. If you include your name, contact information, or other identifying information inside the artwork, that information may therefore become public if the artwork is published. The separate Graffiti Submission Terms govern permission to host and display submitted artwork.
We use Cloudflare Turnstile to help distinguish legitimate visitors from automated or abusive traffic. Turnstile processes browser, device, network, interaction, and other security signals for that purpose. Cloudflare describes THRY.ZIP as the controller of information processed through Turnstile and Cloudflare as a processor for that service.
Our graffiti submission Worker does not intentionally store visitors’ IP addresses in Airtable and does not send the optional remoteip field to Turnstile Siteverify. Infrastructure providers such as Cloudflare and Framer may nevertheless receive network information, including IP addresses, as necessary to deliver, secure, and operate their services.
We do not currently use personal information for targeted advertising or cross-site behavioral advertising.
The graffiti feature may use sessionStorage to remember during your browser session that you have acknowledged the graffiti-wall agreement.
If you choose a light or dark appearance for the graffiti workstation, localStorage may be used to remember that preference between visits. This preference is used only to provide the selected interface appearance and is not used for advertising or cross-site tracking.
We use information processed through the site to operate and maintain THRY.ZIP; respond to and manage contact inquiries; receive, review, moderate, curate, and display graffiti submissions; understand optional private comments; prevent spam, bots, abuse, and security threats; diagnose technical problems; maintain submission integrity and prevent duplicate processing; and comply with applicable law or protect legal rights.
Where European or UK data-protection law applies, our legal bases may include our legitimate interests in operating, securing, administering, and curating the site; your request that we process a submission or interface preference; consent where required; and compliance with legal obligations.
We use service providers that process information on our behalf as necessary to operate the site.
We may also disclose information when reasonably necessary to comply with law, legal process, or valid governmental requests, or to protect the security, rights, or safety of THRY.ZIP, its visitors, or others.
We do not sell personal information, rent personal information, or share personal information for cross-context behavioral advertising.
A submitted graffiti image may be reviewed, moderated, rejected, removed, archived, or displayed publicly as part of the wall.
Your optional private comment is not part of the public artwork and will not be displayed with it.
Do not place information in the artwork itself that you do not want made public.
We retain submissions and associated information only for as long as reasonably necessary to respond to the inquiry, maintain relevant correspondence or records, and address related business, legal, or security needs. review, operate, curate, maintain, or administer the graffiti wall; address abuse or technical issues; preserve appropriate records; enforce applicable submission terms; or comply with legal obligations.
Graffiti selected for the public wall may remain displayed or archived until it is removed as part of normal curation or following an appropriate request.
Private comments are retained with the corresponding submission only for as long as reasonably necessary for submission review and administration.
Session-storage information ordinarily lasts only for the relevant browser session. A saved appearance preference may remain in localStorage until you change it, clear your browser storage, or the site changes or removes that preference.
Depending on where you live and which laws apply, you may have rights concerning personal information about you, including rights to request access, correction, deletion, restriction or objection to certain processing, data portability, withdrawal of consent where processing is based on consent, or appeal of certain privacy decisions.
You may make a privacy or deletion request by contacting Privacy@thry.zip. We may request information reasonably necessary to verify the request and may retain information where permitted or required by law.
If European or UK data-protection law applies, you may also have the right to complain to the competent data-protection authority.
Because THRY.ZIP does not currently sell personal information, share it for cross-context behavioral advertising, or use it for cross-site targeted advertising, browser Do Not Track or Global Privacy Control signals do not change those practices.
THRY.ZIP is a general-audience art website and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that such information was submitted by a child under 13, we may remove it.
We use reasonable technical and organizational measures intended to protect submitted information, including server-side validation, anti-abuse protections, restricted service credentials, and access controls. No method of transmission, processing, or storage is completely secure, however, and we cannot guarantee absolute security.
We may update this Privacy Policy when the site, its features, service providers, or applicable requirements change.
When we make material changes, we will update the effective date above and, where appropriate, provide additional notice on the site.