Privacy

Tattoo Body Map is operated by Vladimir Vishar and Kristina Vishar. This page explains the limited data used by the community features. The site does not use analytics unless this policy is updated to say otherwise.

Community Pain ratings

When you use a community contribution feature, the site uses a random first-party browser identifier stored in a Secure, HttpOnly, SameSite cookie for up to 12 months. The database stores a salted hash of that identifier rather than the raw cookie value. This lets one browser update its rating or written experience, delete its own written experience and avoid creating duplicate current contributions for the same body area.

The community identifier is not used for advertising, analytics or cross-site tracking. The pain score itself is not stored in browser Local Storage for convenience; the site restores your current score from the signed community identity when needed.

Short-lived hashed network counters are also used to limit automated or repeated submissions. Raw IP addresses are not stored in the community rating database.

Community Experiences

If you choose to add a written experience, the note, selected body area, optional session length, optional first-tattoo answer, moderation status and timestamps are stored with the same pseudonymous browser identity used for your pain rating.

Do not put names, contact details, private medical information or identifying information about other people in an experience. Written experiences are reviewed before publication. Public experience cards do not display your browser identifier or IP-derived abuse keys.

Anti-spam checks

Written Community Experience submissions use Cloudflare Turnstile to check for automated abuse. Turnstile verification tokens are sent to Cloudflare for validation and are not retained in the Tattoo Body Map database.

Why this data is used

The community identifiers, moderation records and short-lived abuse counters are used to operate the contribution features, keep aggregate ratings meaningful, prevent abuse and let people update or delete their own written experience from the same browser.

For this pseudonymous community processing, abuse prevention and moderation, Tattoo Body Map relies on legitimate interests under UK data-protection law. The interests are operating the community service people choose to use, protecting it from manipulation or spam and keeping written contributions moderated. The design minimises identifying data and avoids accounts, behavioural advertising and analytics.

Browser storage

The community rater cookie is used only for the account-free contribution identity described above. It is needed to provide contribution ownership, updates, deletion and deduplication without asking for an account or email address. Tattoo Body Map treats this cookie as strictly necessary for the community contribution service. It is not reused for unrelated tracking or personalisation.

Retention

Published experiences and their ownership hash are kept while the experience remains published so that the same browser can update or delete it. Unreviewed pending notes, rejected notes and removed notes are scheduled for deletion after 30 days. Resolved report records are scheduled for deletion after 90 days. Rate-limit counters are kept only for short abuse windows.

Your controls

From the same browser that submitted an experience, you can edit it or delete it through the selected-area panel. Deleting a written experience does not automatically delete the separate numeric pain rating.

Pseudonymous does not mean fully anonymous

The site minimises identifying data, but the community identifier and network abuse controls should be treated as pseudonymous data rather than a promise of complete anonymity.

Community contribution rules are listed in the Community guidelines.