Privacy

What this site collects

Browsing the site: pages are served through standard web hosting. Google Analytics 4 runs on this site for aggregate usage measurement (pages viewed, general traffic patterns), but only after you actively accept analytics in the cookie banner: it is off by default and no Google Analytics script or network activity occurs before that consent. No advertising or marketing tracking runs on this site.

Newsletter: if you submit your email address to subscribe, we collect that address and your selected language to send you a confirmation email and, once confirmed, occasional letters about the collection. Subscribing requires you to confirm from that email (double opt-in): an unconfirmed request does not result in any mailing. Every newsletter email includes a working unsubscribe link; using it stops further mailings at any time. Subscribing is entirely separate from cookie consent: it does not turn on analytics, and your analytics/marketing choice has no effect on your newsletter subscription.

Artwork enquiries: if you use "Enquire about this work", we collect the name, email address and message you type, the reference of the work, the language of the page and the time of the enquiry, together with a record that you ticked the consent box. We use this only to answer your enquiry. The form does not subscribe you to the newsletter or to any other list. The enquiry is not stored in the website's database: it is sent as a single email to our mailbox, where we keep it for as long as needed to answer you and delete it no later than six months after the last message exchanged about it, unless a longer period is required by law. We do not sell it or share it for marketing.

Search: the on-site search box filters content already loaded in your browser. Search terms are not transmitted or logged beyond the ordinary request needed to load the page.

Cookies and local storage

Once you make a cookie-consent choice (accept or reject non-essential storage), that choice is saved in your browser's local storage so the banner doesn't reappear on later visits: this is the only storage this site itself sets, and it is not a tracking cookie. If you accept analytics, Google Analytics may then set its own cookies or similar identifiers in your browser to measure site usage; we have not independently verified their exact names, and describe this generally rather than guess specifics. See the Cookies page for how to change your choice at any time.

Google Analytics

When active (only after you accept analytics), Google Analytics 4 collects aggregate information about how visitors use this site (pages viewed and general traffic patterns) to help us understand and improve the site. It does not run, and sends no data to Google, before that consent. Advertising-related signals (ad storage, ad user data, ad personalization) remain off in every case: this site does not use Google Analytics, or any other technology, for advertising or marketing.

Google Search Console

This site's ownership is verified with Google Search Console via a DNS record at the domain level. This is a one-time proof of domain ownership to Google, not a script running in your browser and not visitor tracking of any kind.

Email delivery

Confirmation and newsletter emails are sent through Resend, an email-delivery service that processes the message and recipient address on our behalf to deliver it. Resend does not have independent access to browse or use our subscriber list beyond delivering the emails we send through it.

Artwork enquiries also pass through Resend, which delivers them to our mailbox, provided by Google (Gmail). Resend is a United States company and processes data mainly in the United States: the transfer is covered by the EU standard contractual clauses in Resend's data processing agreement and by Resend's certification under the EU-U.S. Data Privacy Framework. Google also relies on the EU-U.S. Data Privacy Framework and standard contractual clauses for transfers outside the European Economic Area.

Hosting and infrastructure

The site is hosted on Vercel, which processes standard technical connection data (such as IP address) as part of serving any website: this is inherent to web hosting, not a tracking technology added by this site. Pages are served from servers in Frankfurt, Germany. Vercel is a United States company; where data is transferred to it, it relies on the EU-U.S. Data Privacy Framework and standard contractual clauses. The fonts used on the site are hosted on the site itself, so your browser makes no request to Google's font servers.

Collection content (artwork records, images, and editorial text) is stored and served through a content management system and associated database and file storage. Newsletter subscription records (email address, language, subscription status) are stored in that same database, separately from catalogue content, and are not publicly readable.

Why we use this data

Newsletter: your consent, given when you subscribe and confirm. Artwork enquiries: your consent, given by ticking the box in the form. Analytics: your consent, given in the cookie banner. You can withdraw consent at any time; this does not affect what was done before you withdrew it.

Your rights

You can ask us for access to the personal data we hold about you, for it to be corrected or deleted, for its use to be restricted, to object to its use, and to receive it in a portable form. You can also complain to your national data-protection authority.

To make a request, write to bucytomas@gmail.com, reply to any email you have received from us, or send an enquiry through the form on any artwork page and say that it is a privacy request.

About this policy

MPHEAS.ART is operated by mashko.studio, which is the controller of the personal data described on this page (contact: bucytomas@gmail.com). MPHEAS.ART publishes this website and the collection presented on it.

This policy is reviewed and updated to reflect the site's actual data practices as they develop.