Privacy.

Who is responsible

Pato Turri. For anything on this page — a question, a correction, a request to delete something — the address is info@patoturri.com, and the person who reads it is the same one who took the photographs.

What this site never does

There is no tracking pixel, no advertising cookie and no third party watching you browse. Nobody is profiled and nothing is sold to anyone.

Visits are counted with Umami, which runs on this shop's own server — not Google's, not anyone else's. It sets no cookie and does not store your IP address: it records which pages were opened, from which country and kind of device, and three moments of a purchase (a print added to the cart, checkout started, payment completed). None of it can be traced back to you.

The typefaces are served from this site, not requested from Google, so simply reading a page tells no outside company that you were here. Your cart lives only in your own browser until the moment you check out. And card details never reach this site at all — the payment happens on Stripe's own page.

What is collected, and why

If you open an account: your name, your email and your password, which is stored scrambled so that it cannot be read back — not by me either. This is what lets you sign in and see your orders. An account is not needed to buy. If you ask to reset your password, a single-use link valid for one hour is sent to that email.

If you order a print: what you ordered and what it cost, plus the name, email, phone number and shipping address you give Stripe at checkout. Without those the parcel has nowhere to go.

If you write to me: whatever you put in the email, which stays in my inbox. Nothing is stored on the site.

If you signed up for the travel letter: your email address, and nothing else. The travel letter no longer takes new sign-ups.

Who else sees it

Stripe handles the payment and collects the shipping address. Resend delivers the emails the shop sends and holds the travel-letter list of those who signed up before it closed. Cloudinary serves the photographs themselves and receives no personal data. The database that holds accounts and orders is operated for this shop alone and is not shared with anyone.

Stripe and Resend are United States companies, so data handled by them may be processed outside the European Union under the safeguards their own agreements provide. Beyond those three, nothing is passed on to anyone.

Cookies

One, and only if you sign in: the cookie that keeps you signed in. It is not used to follow you anywhere and there is nothing to consent to, because there is nothing else being set.

How long it is kept

Accounts and orders are kept for as long as the shop exists. There is no automatic deletion: an order is a record of a sale and stays. If you want your account and its data removed, write and I remove them by hand. A travel-letter address is removed as soon as you unsubscribe.

What you can ask for

A copy of everything held about you, a correction, a deletion, or that a use stops. All of it goes to the same address, and none of it needs a reason. If an answer does not satisfy you, you can complain to the data protection authority of the country you live in.