Privacy

Scope of this draft

This notice describes the reviewed website code and the services that still need confirmation. It is a review draft, not a completed privacy notice. The legal identity and contact details of the data controller have not yet been supplied.

The public website is hosted on Cloudflare Pages. The localhost preview runs from the reviewer’s computer. A local preview does not establish what the production host logs or retains.

Browsing and downloads

Serving a page or file involves network requests. On the public site, the host may process technical data such as IP addresses, requested URLs, browser information and timestamps to deliver and protect the service. The exact logging, recipients, retention and hosting settings need confirmation.

The reviewed homepage, Shop, kit, Atlas and Field Notes code does not include an account-registration form or an active payment form. Newsletter controls are currently disabled and do not collect an email address. This does not mean the hosting service processes no personal data.

Browser storage and screensavers

The web screensaver gallery saves its last available artwork feed in local storage and caches website resources and artwork through a service worker for offline use. Older archived shop prototypes may save a preview cart in local storage.

You can remove this information through your browser’s site-data controls. Doing so may remove offline artwork and saved preview preferences. The native Mac screensaver is a separate application; its artwork requests and local caching also need to be covered in the final service description.

Analytics and campaign links

No third-party advertising or analytics SDK was identified in the reviewed current page scripts. Hosting-level analytics, cookie behavior and security settings have not been verified, so this is not a claim that the public service is cookie-free or tracking-free.

Supported campaign parameters, such as UTM tags, can be carried from a page link to a kit or future checkout destination. They can appear in URLs, browser history and request logs. The reviewed commerce code does not store those parameters in a browser profile or analytics database.

Future purchases and email signup

A future checkout may process contact, order, payment and tax information. Newsletter signup may process an email address and consent records. Neither service is connected in this review edition.

Before either opens, this notice must name the providers, describe their roles and the information exchanged, give their privacy links, and explain retention and any international transfers. The proposed email signup is optional and separate from buying a kit. The signup flow must explain how to unsubscribe and withdraw consent.

Purposes, legal bases and retention

The final notice must document the lawful basis for each actual activity. Proposed activities include delivering and securing the website, fulfilling orders, responding to support requests, meeting legal recordkeeping duties and sending requested newsletters.

Possible bases include contract, legal obligation, consent and legitimate interests, depending on the activity. Any reliance on legitimate interests must identify those interests. The controller must confirm the applicable bases, retention periods or criteria, recipients and transfer safeguards before adopting this notice.

Your rights and contact

Where applicable, data-protection rights include access, correction, erasure, restriction, objection and portability. You may withdraw consent without affecting the lawfulness of earlier consent-based processing, and may complain to the relevant supervisory authority. Rights depend on the circumstances and legal basis.

A working privacy contact and the controller’s identity must be added before this notice is adopted. This draft does not provide a request form or a monitored contact address.

External links and updates

Following a source or external service link takes you to another website with its own privacy practices. We will update this notice when the website’s actual services and data practices are confirmed. The final version needs an effective date and a clear contact route.