Privacy — Santiago Aburto

This is a one-artist studio, not an advertising business. The short version: there is no tracking, no analytics, no advertising pixels, and no mailing list you can be added to without asking.

What is collected

If you send an enquiry

Your name, email address and message are stored so the studio can reply. A one-way hash of your IP address and your browser's user-agent string are stored alongside it purely to identify spam floods. The raw IP address is never written down.

If you buy a painting

Checkout is handled entirely by Stripe. Card numbers are never transmitted to, processed by, or stored on this server — the studio never sees them at any point. What is stored here is what is needed to fulfil the order: your name, email address, phone number, billing and shipping address, the amount paid, and Stripe's reference for the payment.

If you simply browse

Nothing. There are no analytics, no cookies set for visitors, and no third-party scripts. Fonts are served from this server rather than a font CDN specifically so that browsing does not leak to anyone else.

Cookies

The public site sets no cookies. A single session cookie exists for the studio administrator to stay signed in; it is strictly necessary, set only after a successful login, and never used to track anyone.

Who else receives your data

Stripe — payment processing. Governed by their own privacy policy.
The email provider that carries order confirmations and replies from the studio.

That is the complete list. Nothing is sold, rented, shared for advertising, or used to build a profile of you.

How long it is kept

Enquiries — up to two years, then deleted. Spam is deleted sooner.
Order records — seven years, because tax law requires it.
Administrator sessions — expire after twelve hours.

Your rights

You may ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Requests are handled personally and without charge — write to the studio. Order records required for tax compliance are the one exception to deletion, and only for as long as the law requires them.

Security

The site runs on a dedicated server over HTTPS. Administrator access requires a password and a second factor. Passwords are stored as Argon2id hashes. Sessions are stored as hashes, so a database compromise does not hand over live sessions.