How we handle your details.

Participatory Art is run by its founders, Mathias Gullbrandson and Martin Källström, in Stockholm. Together we are responsible for the personal data described on this page.

Write to either of us with any question about your details: mathias@participatory.art or martin@participatory.art.

The contact form asks for your name, your email address and your message, and a phone number if you choose to give one. It also records which page of the site you sent it from. The form delivers your message by email to both founders. Nothing you write is stored in a database on the website.

To protect the form from abuse, Cloudflare briefly counts submissions per network address. That count is not kept with your message. Our own logs record only a delivery reference, never what you wrote or your address.

We use what you send us to answer you and to carry on the conversation you started. Our basis for this is our legitimate interest in replying to people who contact us and, where a conversation moves towards an assignment, the steps needed before an agreement. The same applies when you email us directly.

We build our work through people we know. Sometimes a colleague or collaborator in our network suggests someone we should talk to. In that case we hold only what is needed for a good first conversation: your name, your current role and organisation, who suggested you, and why they thought the conversation would be relevant.

We do not scrape networks or buy lists, and nothing is sent to you automatically. A person decides whether to get in touch. When one of us first contacts you, we tell you where your details came from and how to reach us about them.

If you would rather not hear from us, say so and we stop. We then remove your details, keeping only the minimum needed to make sure we do not approach you again.

Invited collaborators use an authenticated workspace to prepare professional conversations, understand organisations and develop ideas. It stores member names and email addresses, open research documents, comments, document relationships and requests left for a member's own AI agent. A document can include a professionally relevant contact's name, role, organisation, source and relationship context. Members should document why personal information is needed and assess its basis before using or sharing it.

Documents are private to their creator by default. A member can explicitly share a document with all active team members. Administrators manage memberships but cannot read other members' private documents through the app. We send no prospect messages automatically and do not identify visitors to the public website.

Storage and AI tools

The research database is configured for Cloudflare D1's EU jurisdiction. This describes the database location; it does not mean every network request, email or provider operation stays within the EU. If a member gives their agent access, that agent can read and change the documents available to that member. Their chosen AI service may process the retrieved material under its own terms. Members must choose the material and tools they are authorised to use.

Sign-in and sessions

Sign-in codes and pending device approvals expire after ten minutes. Browser and CLI session grants have no fixed expiry and remain valid until you log out of that session or access is revoked. The necessary browser cookie lasts up to 400 days and renews when you use the service; clearing browser data or browser storage policies can still require a new sign-in. Codes and session secrets are stored as hashes.

Retention and deletion

The service uses short-lived abuse counters and keeps document activity references for up to ninety days. Its daily cleanup removes expired authentication records and acknowledged agent requests older than seven days. Documents and comments remain until a responsible member deletes them; contacts should be reviewed when their professional purpose ends. Deleting a document removes its live contents, comments and linked notifications. Cloudflare's recovery facilities and separately downloaded exports can retain earlier copies.

Notifications and reminders

Notifications and scheduled reminders are shared between a member and their agent. Email is optional and contains a protected link, without document contents or titles. Read and completion state is stored per recipient, along with email dispatch status and any provider receipt.

Completed or cancelled notifications are removed ninety days after the last recipient completes them or the creator cancels them. Unfinished notifications remain available; deleting their linked document also removes them.

Feedback

Signed-in members can submit feedback about the website. We store their reporter ID, a comment, category, page URL, CSS selector, role, document ID and viewport size, alongside progress and delivery evidence. URL query parameters, screenshots, page text and form values are not collected. Feedback is visible to its reporter and administrators and can be deleted through the CLI when it is no longer needed. Selected feedback and delivery evidence can also appear in private GitHub Actions logs.

Contact either founder to ask about information held about you, to correct it, or to ask that it be removed or no longer used. Sharing a colleague's contact details is not consent on that person's behalf, and adding a note never authorises outreach.

The public site uses no analytics or tracking. The research workspace uses one necessary session cookie to keep invited members signed in. If you are signed in, that cookie also renews when the site checks your membership, including for the feedback tool. Anonymous visits do not create that cookie. The site is served through Cloudflare, which processes your network address to deliver the pages and to protect the site against attacks.

The typefaces are loaded from Google Fonts, so your browser also sends a request to Google when a page loads.

The Launch page shows a film about Unknown 9 that is hosted on YouTube. Nothing is loaded from YouTube until you press play. When you do, the player loads from YouTube’s privacy-enhanced domain, and Google receives your network address and may store information in your browser under its own privacy policy.

• GitHub hosts our private source repository and the manual feedback workflows; their private job logs can contain selected feedback.
• Cloudflare hosts the site and private research workspace, stores research documents, feedback and account records, and sends contact-form messages, member invitations, requested notifications and sign-in codes.
• Google hosts our mailboxes through Google Workspace, serves the typefaces through Google Fonts and, if you press play, shows the Unknown 9 film through YouTube.

We do not sell or share your details with anyone else. Where a provider processes data outside the EU, it does so under the safeguards the GDPR requires.

We keep enquiries and conversations for as long as the conversation, or any collaboration that grows out of it, is active, and we remove them when they are no longer needed. Suggested contacts we have not reached are reviewed regularly and removed.

You can ask us to delete your details at any time.

Under the GDPR you can ask what we hold about you, have it corrected or deleted, restrict how we use it, object to our use of it, and receive a copy in a portable format. Email either of us and we will respond.

If you are not satisfied with our answer, you can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, or to the supervisory authority where you live.

We update this page when our practice changes. The date at the top tells you when it was last revised.