Privacy
A memory deserves careful handling. This notice explains the current email-based request flow and the rules any future private upload system must follow.
Echt Arts uses the contact details, story, preferences, permissions, and source photograph needed to review, quote, make, deliver, and support a commission. The current request button opens your email app; the website itself does not upload or store the photograph in that email-only flow.
Original customer photos and failed test pulls stay private by default. Source photos, process material, or finished work are shared publicly only with the customer’s clear consent. Permission can be limited or withdrawn for future sharing.
To be considered: sharing a unique print, though, is a warm invitation to others to pause, look closely, and feel. Your printed memory might inspire others through what deeply matters to you. That is unique. That is Echt.
Payments on this website are taken by Stripe, on a secure page Stripe runs. Your card details go to Stripe only — Echt Arts never sees or stores a card number, and never asks for one by email. Stripe keeps the name, email, phone and delivery address you give at checkout so the order can be sent; this website stores none of it. Shipping providers receive only what they need to deliver. If you bid on a painting, your name and email are kept with Stripe in the same way, used only to run that bidding and its sale, and never shown to other bidders.
When private online storage is enabled, source photos, failed pulls, and other working files will be deleted 90 days after an order is completed or declined, unless a legal record must be kept or the customer has clearly consented to longer use. Clients may request access, correction, or deletion where applicable law allows.
Future online storage must include routine orphan-upload cleanup for files that were uploaded but never attached to a valid request. Upload and deletion events should be logged without putting the private image itself into application logs.
Echt Arts counts its own visits and uses no analytics company: nothing is sent to Google or any other third party, and no cookie is set. Each page view records the page, the referring site, the browser and device, the approximate location the network reports (country, region, city), and how long the page stayed open. A visitor is identified only by a one-way hash of their network address and browser, re-salted every day, so the same person cannot be followed from one day to the next. Network addresses are stored with the final part removed, which identifies a network but not a household. A random number groups one sitting's pages together; the browser discards it when the tab closes. Do Not Track and Global Privacy Control are honoured, and nothing at all is recorded for a visitor whose browser sends either.
Privacy questions, consent changes, and deletion requests can be sent to hello@echtarts.com. Enough order information may be retained to meet tax, accounting, fraud-prevention, dispute, or other legal obligations.