The short version: this site collects what it needs to answer your message and post your order, plus anonymous figures on which pages get read. There are no advertising trackers, and nothing here is ever sold or handed to a data broker.

What is collected

If you use the contact form — your name, your email address and the message you wrote.

If you place an order — your name, shipping address, email address, what you bought and what you paid. Payment itself happens on Stripe's own page: your card details never reach this site's server, and I never see them.

Who else can see it

• Stripe, which processes payments and holds the payment record. Their privacy policy covers what they do with it.
• The mail provider that carries order and enquiry notifications to me.
• The company hosting this server, whose logs record ordinary web-server information such as IP addresses.
• Google Analytics, which counts visits so I can see which work people actually look at. It is configured to store nothing on your device and it shortens your IP address before recording it, so it measures pages rather than people — it cannot tell that two visits were the same person, here or on any other site. Google's privacy policy covers what they hold.

That is the whole list. No advertising networks.

Cookies

Two, both strictly functional: one that remembers what is in your shopping cart, and one that protects forms against cross-site request forgery. Neither tracks you, and there are no third-party cookies.

How long it is kept

Enquiries are kept while they are useful and deleted once they are not. Order records are kept for ten years, because Swiss accounting law requires business records to be retained that long.

Your rights

This site is run from Switzerland and falls under the Swiss Federal Act on Data Protection. If you are in the EU or the UK, the GDPR applies to your data as well.

Either way you can ask what is held about you, have it corrected, or have it deleted. The one thing I cannot delete on request is an order record still inside its ten-year retention period — those go once the period lapses.

Asking

Write to the address on the contact page and say what you would like. I answer these myself.