Privacy Policy
Plain English: what's collected, why, and for how long.
What's collected
Contact form: when you send a message, we collect the name, email address, subject, and message you type in. It's emailed directly to the site moderator — it isn't published anywhere, and there's no public visibility or approval queue for it.
Likes: when you like an artwork, your IP address is hashed (run through a one-way scrambling function combined with a secret value the site holds) before it's stored, to stop the same visitor liking a piece more than once. This hashed value is pseudonymised, not anonymised — because the site holds the secret used to create the hash, it still counts as personal data under data protection law, even though it can't be read back into your actual IP address by anyone else.
Contact rate-limiting: the same hashed-IP approach is used to limit how many messages can be sent from one visitor per hour, to keep the contact form from being spammed.
A small on-device flag (via your browser's localStorage) remembers which artworks you've liked, so the heart shows as filled instantly. This stays on your device and is never sent anywhere beyond what's needed for the like itself.
Retention
If a contact message can't be emailed out right away, it's temporarily logged as a fallback so it isn't lost, and automatically deleted after 90 days. Hashed-IP records for likes and rate-limiting persist for as long as the feature needs them to function.
Cookies and local storage
This site doesn't show a cookie consent banner. The like-button's localStorage flag and Cloudflare Turnstile (the spam-prevention check on the contact form) both fall under the UK's service-functionality and fraud-prevention storage exemptions — but we're disclosing them here regardless, for transparency.
Who we share data with
We don't sell or share your data for marketing. A small number of service providers process data on our behalf to make the site work, each under their own data processing agreement:
- Resend — delivers contact form emails
- Cloudflare — hosting, spam prevention (Turnstile), and the KV storage used for likes/rate-limiting
- DecapBridge — authentication for the site's content editor
- GitHub — hosts the site's source code and content
Questions
If you have any questions about this policy or what's collected, use the contact form.
Let's Create Together
Whether you're interested in commissioning a piece, collaborating on a project, or simply want to share your thoughts about art—I'd love to hear from you.