Privacy policy

Last updated: 12 November 2026. This policy covers the Now Hanging app and the website nowhanging.art. If the English and German versions differ, the German version applies.

1. Who is responsible

Piyush Sardana, Ahornweg 16C, 14547 Beelitz, Germany · Email: support@nowhanging.art

We are not required to appoint a data protection officer. For anything about your data, write to the address above.

2. The app

• No account, no server holding your data. The app creates no account, collects no usage data and sends nothing about you to us.
• Your photos stay on your device. To hang them, they go over your home network straight to your TV. Finding faces for the crop happens on the device.
• Museum paintings are downloaded straight from the museums' image servers: images.metmuseum.org, 1.api.artsmia.org, iip.smk.dk, api.nga.gov, iiif.micr.io (for the Rijksmuseum), images.collections.yale.edu and media.getty.edu. As with any download, those servers see your IP address; they handle it under their own responsibility.
• Invited artists. If you switch them on, the app loads their works from nowhanging.art. What is said about the website below applies.
• Buying. The in-app purchase is handled by Apple (App Store) or Google (Google Play), under their own privacy terms. We never see payment details.

3. This website

• No cookies, no analytics, no ads, no scripts. The fonts are on this website itself; nothing is loaded from other servers.
• Delivery: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, as our processor (Art. 28 GDPR). The files are stored in Frankfurt and delivered through Amazon CloudFront. To deliver a page, AWS processes technically necessary details such as your IP address, the time, the address requested and your browser. We have not turned on access logs and analyse nothing. Legal basis: Art. 6(1)(f) GDPR (our interest in delivering the website securely).
• Email: if you write to us, we use your details only to answer (Art. 6(1)(b) or (f) GDPR), and delete the message once it is dealt with and no retention duty applies. Our email runs on Microsoft 365.
• Artists: if you apply or show your works in the app, we use your name, email address, website and the links you send to decide on your application and, if we agree, to carry out your permission and credit you by name and link in the app and on this website (Art. 6(1)(b) GDPR). We delete applications that don't lead to an agreement once they are no longer needed.

4. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Write to support@nowhanging.art.

You can also complain to a data protection supervisory authority. Ours is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.