Privacy policy
Last updated: [date]
The data controller is [legal name], [address], [contact email].
What we collect and why
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Email, first name (newsletter) | Sending news about new products and services | Consent | Until you unsubscribe |
| Email (waitlists) | Telling you when the course or commissions open | Consent | Until you unsubscribe, max. 3 years |
| Email, purchases, course progress | Giving you access to what you bought | Contract | As long as the account exists, then 3 years |
| Commission orders: email, name or handle, description, characters, shipping address, messages with the artist | Making and delivering your artwork | Contract | As long as the account exists, then 3 years (amounts and dates: 10 years, see below) |
| Reference images you upload for a commission | Drawing your artwork | Contract | Deleted automatically [180] days after the order is finished |
| Reviews you choose to leave | Showing them on the site, only if you ticked the box | Consent | Until you ask us to remove them |
| Payment data | Processing the payment | Contract | Handled by Stripe, never stored by us |
| Invoices / order records | Accounting obligations | Legal obligation | 10 years |
Service providers (processors)
- Stripe — payments (stripe.com/privacy)
- Supabase — database, log-in and file storage
- Resend — sending emails
- Bunny.net — video hosting and streaming
- Vercel — website hosting
- Cloudflare (Turnstile) — anti-spam check on the commission request form, if enabled
- [Brevo — newsletter, if enabled]
Some of these providers are located outside the EU; transfers are covered by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
Cookies
The site only uses cookies that are strictly necessary (keeping you logged in to your library). No advertising or analytics cookies are used, so no consent banner is required.
Commission messages and files
Messages exchanged with the artist on an order page, and the files attached to them, are only visible to you and to the two administrators of the site (the artist and the site manager). Files are stored privately and only opened through short-lived links.
Your rights
You can access, correct, delete or export your data, object to its use or withdraw your consent at any time by writing to [contact email]. We answer within one month. When you ask us to delete your data, your personal details are removed, but the amounts and dates of your purchases are kept for the legal accounting period, without your name or email. An order still in progress must be finished or cancelled first. Every marketing email contains a one-click unsubscribe link. You can also lodge a complaint with the CNIL (www.cnil.fr).