Privacy

The contact form asks for your name, your email address, a subject and a message. It goes straight to my mailbox as an email, with your address as the reply-to, so I can answer.

Nothing from the form is saved on this site or in its database. The message exists as an email in the studio mailbox and nowhere else. If email sending has not been switched on, the form drafts the message in your own mail app instead, and this site never sees it at all.

There is one hidden field on the form that you will never see. It catches automated spam. If it is filled in, the message is discarded.

Payment goes through Stripe’s own hosted checkout page. Your card details are typed on Stripe’s page, not this one, and never touch this site or its server.

This site sends Stripe: the email address you typed at checkout, the prints you chose with their sizes and prices, the shipping rate for your country, and a short list of the items so that the confirmation emails can name them. Stripe then collects your name, your delivery address, your billing address and your payment details, and tells this site the order completed.

When a payment completes, the order is stored here: the prints and sizes, the totals, the delivery address Stripe collected, your email address, and the time it arrived. It is kept so an order cannot be lost if an email fails to send, and so it can be made and posted without opening Stripe. Card details are never stored, and this site never sees them — Stripe handles the payment on its own pages.

Stripe also sends you its own receipt, and may use what it collects to detect fraud. That part is Stripe’s, under Stripe’s privacy policy.

The cart is kept in your own browser, not on a server. So are the 3D gallery’s quality setting and a note of the last order the cart was emptied for. None of it is sent anywhere, and none of it identifies you. The cookies page lists every key by name.

Original works leave the studio with an NFC tag. Tapping it opens a page that checks the tag is genuine.

That check records one thing: the tag’s own serial number and the highest tap count it has ever shown, with the time it was last seen. That is what stops a copied link being passed off as a tap. It says nothing about who tapped it, where they were, or what phone they used — no address, no account, no location.

I edit this site through a page only I can reach, and I sign in to it with a passkey. The database holds the public half of that passkey, a name for the device, and when it was last used. The private half never leaves my phone or laptop.

Signing in sets a cookie that names the passkey and expires after fourteen days. It only applies to the studio pages. If you are reading this, you do not have one.

The site runs on Vercel, which keeps the ordinary access logs any web server keeps: the address you requested, roughly when, your browser’s user-agent string and your IP address. Vercel keeps those for a limited period under the hosting plan and then deletes them; they are not copied anywhere else and I do not analyse them.

The site writes a handful of its own lines to those logs — that an order arrived, or that an email failed to send. Where email sending is switched off entirely, an order summary is written to the log instead of emailed, because it is better than losing it. No card details are ever logged, by design.

To stop the contact form and the checkout being flooded, this site counts recent requests from each internet address. That count, and the address, sit in the database for at most a day and are then deleted. It is used for nothing else — not for analytics, not for recognising you on a later visit.

Five companies are involved in running this site. None of them is paid to advertise to you.

Stripe, Inc. takes the payment and holds the order, including your delivery address. Resend delivers the emails this site sends — the contact form’s message, and the two order confirmations. Supabase hosts the database and the image storage: the catalogue, the tag registry, the tap counters, my passkey and the site’s own wording. Vercel hosts and serves the site. Cloudflare answers the DNS lookups for sunurai.com.

Supabase is the database behind this site. It holds the paintings, the NFC tags and my own login, and since an order is now stored, it also holds the name, delivery address and email address that came with it. Fonts are served from this site’s own address; nothing is fetched from Google.

Messages stay in the studio mailbox until I delete them. Order emails stay there too. Stripe keeps its own record of a payment for as long as its terms and the law require.

The tap counters are kept indefinitely on purpose: they only stop a replayed link if they are never forgotten. They hold no personal data.

Not yet written: [TO FILL IN: how long you keep orders and enquiries. This now covers the stored order rows, not only the emails, so say a period you will actually keep to. The usual answer is the tax-record period, because that is what the row is for: “Order records are kept for seven years, which is what the tax rules here require. Enquiries are deleted after two years.”]

Write to the address at the end of this page and say what you want. I will find everything I hold about you and either send it to you or delete it.

Two things I cannot delete on request. Stripe’s record of a payment is Stripe’s and is kept for as long as accounting and anti-fraud rules require; you can ask Stripe directly. And an email you sent me is also a record of a conversation — I will delete my copy, but I cannot unsend it.

There is no account to close, because this site has no accounts.

If this page changes in a way that matters, the date at the top changes with it. There is no mailing list to notify, because there is no mailing list.