The small print, in plain words

Your privacy.

Prototype draft — not a finalized launch policy. Operator identity, provider arrangements, retention periods and applicable consumer terms must be completed before sales open.

Who runs this site

c
Privacy contact: ccemgungor@outlook.com

Browsing the drawings

The gallery application has no customer accounts, marketing analytics, advertising pixels or device fingerprinting. Fonts and gallery assets are served by this site. Ordinary gallery browsing does not set an application session cookie.

The hosting infrastructure necessarily receives network information such as an IP address when serving a page. Hosting provider: Azure App Service. Hosting log retention: Configure and confirm before public launch.. Infrastructure logging and its purpose, legal basis, retention and any international transfers must be documented once hosting is configured.

Purchases happen elsewhere

The Buy button takes you to an external checkout. That service collects payment and contact details and delivers the purchase. This application does not receive payment webhooks or store buyer emails, billing details or order records. Customer information may still be accessible to the seller through the provider’s dashboard or customer support.

Checkout provider: not connected yet. The respective privacy roles and required disclosures must be confirmed before launch.

Friend codes and necessary cookies

Visiting the friend-code form sets a signed, HTTP-only session cookie to protect the form against forged submissions. Redeeming a code adds its hash to the cookie, so this browser can request downloads. The server stores the code’s hash, creation time and whether it is active. It does not attach a name, email address or device identifier to the code.

Friend access normally lasts for the browser session; browser session restoration can retain it. You can explicitly forget access on the friend-code page or clear site cookies. Revoking a code immediately prevents further downloads with that code, including in browsers that remembered it. Revoked code records remain until the operator removes them; the launch retention schedule is still to be decided.

The private studio uses the same essential cookie for administrator authentication and form protection, with an eight-hour session lifetime. These features are intended to rely on the exemption for strictly necessary storage, subject to the applicable local rules.

Questions and rights

Where GDPR applies, rights can include access, correction, erasure, restriction, portability and objection, subject to the relevant conditions. You can also complain to the competent data protection authority. The operator’s contact, applicable legal bases and procedures for handling support messages and requests must be finalized before launch.