Privacy

This page describes what this website does with personal data. [TODO: name and contact details of the data controller (open question Q19)]

Visitor statistics

The site counts visits with its own first-party analytics. It sets no analytics cookies, does not store IP addresses and uses no third-party trackers, advertising pixels or social media widgets. A visitor is counted with a hashed identifier that changes every day, so visits can't be linked from one day to the next. [TODO: confirm how long raw statistics are kept; the current setting is 90 days]

Messages, commissions and the newsletter

• When you send a message or a commission request, the studio stores your name, email address and what you wrote, so it can reply.
• When you subscribe to the newsletter, the studio stores your email address and language. You confirm by email first (double opt-in), and you can unsubscribe at any time.
• To stop spam, forms are rate-limited using a one-way hash of your connection details; the raw IP address isn't stored.

Orders and payments

Payments are processed by Stripe. Your card details go directly to Stripe; the studio never sees or stores full card numbers. For an order, the studio keeps your name, email address, shipping address and the order details to deliver it and for its records. [TODO: how long order data is kept (accounting rules depend on the studio's country, Q19)]

Stored in your browser

Saved works ("Saved") and your cm/in preference are kept in your own browser's local storage and are never sent to the studio.

Your rights

[TODO: your rights under the GDPR (access, correction, deletion, objection) and how to exercise them, for legal review]