Privacy Policy

What this covers

We are a splat paint studio in Old Sacramento. This policy covers this website and nothing else. In particular it does not cover FareHarbor's booking and payment pages, which open in a window on top of this site and are run by FareHarbor under their own policy — see below.

What we collect

When you send us a message

Our contact form asks for your name, your email address, your phone number (optional) and your message. We use them to reply to you and for nothing else. We do not sell them, rent them, or add you to a marketing list.

When you simply visit

The site keeps its own small record of how it is used, so we can see which parts of it are useful. That record holds:

• a random identifier your browser stores for us, so we can tell a returning browser from a new one. It is a short string of random characters and it is not connected to your name, your email, or anything else about you.
• a second random identifier that lasts only until you close the tab.
• which pages you opened, how far down the homepage you scrolled, and which buttons and links you pressed.
• the date and time each of those happened.

That is the whole list. We do not record your name, your email address, your IP address, your location, or which site you arrived from, and nothing in this record is joined to anything that identifies you.

Automatically, by the companies that run the site for us

• Our host keeps standard server logs, which include the IP address a request came from. Those logs are the host's, kept under their policy, and used to keep the site up and to stop abuse.
• We use Vercel Web Analytics for a simple count of page views, roughly which country visitors are in, what kind of device and browser they use, and which site linked to us. It sets no cookies, and it identifies a visitor with a value derived from their network address and browser that is thrown away and regenerated every day, so it cannot follow anyone from one day to the next.
• When you submit the contact form, the address your request came from is held in memory for ten minutes, so that one source cannot send us more than a handful of messages at a time. It is never written to a database.

Cookies, and the two things that are not cookies

We use no cookies to track you, and there is no advertising or third-party tracking on this site.

The two random identifiers described above are not cookies, but they are stored in your browser in a similar way, so they are worth naming plainly. You can clear both at any moment from your browser's settings. The site works exactly as before afterwards — you are simply counted as a new browser.

One genuine cookie exists: if you are studio staff and sign in to the site's admin area, your login is kept in a cookie. It is only ever set after someone signs in.

Do Not Track

Some browsers can send a “Do Not Track” signal. This website does not respond to it. There is no agreed standard for what a site should do when it receives one, so rather than imply a protection we do not provide, we treat every visit the same way and have described above exactly what is recorded. Clearing your browser storage, or using private browsing, is what actually stops us counting you.

How long we keep it

• Messages sent through the contact form: three years, then deleted.
• The usage record described above: 400 days. Each entry deletes itself automatically once it reaches that age.
• Logs held by the companies below: for as long as their own policies say.

Who else can see it

We do not sell or share your information. We do rely on other companies to run the site, and your information passes through them:

• Vercel — hosting, the site's images, and the page-view analytics described above. Their privacy policy.
• MongoDB Atlas — the databases holding contact messages and the usage record. Their privacy policy.
• Resend — delivers contact-form messages to our inbox as email. Their privacy policy.
• FareHarbor — takes bookings and payments. Their privacy policy.

FareHarbor is worth a sentence of its own. When you press a booking button, FareHarbor's own booking window opens on top of this site. Everything you type into it — your name, your contact details and your card details — goes to FareHarbor, not to us. We never see card details, and this website cannot see whether you completed a booking. What we do pass FareHarbor is a short tag recording which button you pressed, so we can tell which parts of the site lead to bookings. That tag says nothing about you.

Children

This website is intended for adults booking sessions. It is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has sent us information through this site, email us and we will delete it.

Your choices

Email us at the address below and we will tell you what we hold about you, correct it, or delete it. Please write from the address you used to contact us, or tell us enough to find the message.

One honest limit: the usage record contains no name and no email address, so we cannot look you up in it even if you ask. Clearing your browser storage is what removes the identifier tying those entries together.

Changes to this policy

If we change it, we replace this page and update the date at the top. There is no mailing list to notify you from, so that date is the record — it is worth a glance if you are checking back.

Questions

Anything at all about this page, or about what we hold: the address is just below.