YOUR PHOTOGRAPH
STAYS WITH YOU.

Stensyls is operated by Layermade, established in England. We are the controller of the personal data described here.

Contact us at hello@stensyls.com.

• Your account. Your email address and the date you signed up. We do not store a password: you sign in through an emailed link or a trusted third party sign-in.
• Your plans. The body settings, placements and arrangement of each plan you save.
• Your artwork. Images you upload, lettering you generate, and stencils produced by Stencil Extraction.
• Tattoo photographs. If you use Extraction, the part of a photograph inside an outline you draw. See below.
• Your purchases. Which pass you hold, when it expires, your credit balance and your receipts. We never see or store your card details. Payment is handled entirely by our payment provider.
• Basic usage data. Page views and performance, measured without cookies and not linked to you as an individual.

We process your account, plans and artwork to provide the service you have signed up for. We process your purchase records to give you what you paid for and to meet our tax obligations. We use security, backup and basic usage data to keep the service working and your work recoverable, which is our legitimate interest in running a reliable service.

We do not sell your data. We do not use your artwork or photographs to train any AI model, ours or anyone else’s. We will not use your images in marketing without asking you separately.

This is the most sensitive thing we handle, so here is exactly what happens.

Your original photograph never leaves your device. You trace an outline around a single tattoo, and only what is inside that outline is sent. Everything outside it is discarded before transmission. The original file stays in your browser.

We use an outline rather than a rectangle on purpose. A rectangle around a tattoo takes a lot of surrounding skin with it. Tracing the shape means what leaves your device is close to the artwork itself, and keeps other tattoos, scars, clothing, backgrounds and other people out of it.

The outlined selection is held privately while your extraction is queued or processing, so you can close the page without losing the request. It is queued for automatic deletion after completion, failure, cancellation or expiry. Temporary selections are excluded from our independent artwork backups. We do not retain your original photograph.

The selection goes to our AI provider to generate the stencil. OpenAI normally retains abuse-monitoring content for up to 30 days; legal requirements or safety review can require longer retention. This is separate from our temporary selection storage.

Nothing is sent unless you press the button. Never in the background, never on upload.

The completed stencil is saved to your account, where you can download it even after a pass ends. You can delete the saved extraction or add it to a plan. Copies already added to plans follow their plan and recovery-history retention.

Extraction works on one piece at a time, photographed close and in even light. It is not built for sleeves or large multi-piece areas. It reconstructs linework rather than copying it exactly, so check the result before relying on it.

Because a tattoo design can itself say something about you, do not submit an image whose content you would rather not share. Everything else in Stensyls works without Extraction.

Who else handles your data, what they receive and where they are

Who	What they get	Where
Our hosting and database provider	Account, plans, artwork, purchases	UK or EEA
Our content delivery and analytics provider	Usage data	Global network
Our AI provider	The traced selection only	United States
Our payment provider	Purchase records	Per their terms
Our email provider	Your email address	Per their terms

Each is bound by a written contract and gets only what it needs. We may also disclose data where the law requires it.

Sending the selection to our AI provider is a transfer to the United States. Where that provider is certified under the UK Extension to the EU-US Data Privacy Framework we rely on that; otherwise we use the ICO’s International Data Transfer Agreement.

• While your pass is active: your plans and artwork stay available.
• After a pass expires: readable and exportable for 12 months. Buying another pass restores editing. We email you 30 days and 7 days before deletion, and your account shows the date.
• Free accounts: the same 12 months, counted from your last sign-in. Signing in resets it.
• Tattoo photographs: not kept by us at all.
• If you delete your account: removed within 30 days, apart from receipts we must keep for tax, currently six years.
• Backups are overwritten on a rolling cycle, so deleted content can persist briefly before being cycled out.

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or hand it over in a portable form. Where we rely on your consent, you can withdraw it at any time.

Email hello@stensyls.com and we will respond within one month.

You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, though we would rather you gave us the chance to put it right first.

We use a small number of strictly necessary cookies to keep you signed in. We use no tracking or advertising cookies, and our analytics work without cookies, which is why there is no banner to dismiss.

Stensyls is not for anyone under 18 and you should not create an account if you are.

If we change this policy in a way that materially affects you, we will email you before it takes effect.