This Privacy Policy explains what personal data is collected on this website, how it is used, and what rights you have.

1. Responsible Person

The party responsible for data processing on this website is:
Chimchiri
Contact: chimchiri@outlook.com

2. Data This Site Processes

a) Server log files

This website does not keep access logs: your visits and your IP address are not recorded for statistics or tracking. The server only stores technical error logs, which are used to detect and fix technical problems, not to identify or track visitors.

To protect the forms and the login against spam and abuse, the server briefly keeps IP addresses in its working memory (for example, to limit how many messages can be sent per hour). These are not written to disk and are discarded automatically. Failed login attempts to the site's administration area are logged together with the IP address, for security reasons.

b) Cookies and browser storage

This site only uses cookies that are technically necessary. None of them is used for advertising or tracking, and none is shared with third parties:

• An age-confirmation cookie named "artSiteEntryConfirmed" is stored in your browser for 30 days when you confirm that you are an adult. It saves you from seeing the age prompt on every visit.
• A session cookie named "sid" is stored after you log in via Patreon (see section 2d). It keeps you logged in so you do not have to authenticate on every page, and it is removed when you log out.
• Two short-lived cookies named "oauth_state" and "oauth_state_refs" are stored only while a Patreon login is in progress (at most one hour). They protect the login against forged requests and are deleted as soon as you return from Patreon.

The shop also uses your browser's own storage. Your cart, your selected country and a discount code you entered are kept on your device, so they are still there when you come back. The address you enter at checkout is kept only in the open browser tab, so that it is not lost if the payment is interrupted; it is removed when you close the tab or after a successful order. This data is only sent to this website's server when it is needed to calculate prices or to place your order.

c) Fonts

The "Montserrat" font is delivered by this website's own server. No connection to Google or any other font service is made.

d) Login via Patreon (OAuth)

This website offers two separate Patreon logins: one for the main art area (Chimchiri) and one for the ChimRefs reference area. Each connects to a separate Patreon campaign. You can log in to either or both, depending on which content you wish to access.

When you do, you are redirected to Patreon, and data is exchanged with Patreon, Inc. (located in the United States) to confirm whether you are an active patron. The login itself is handled by Patreon under Patreon's own privacy policy. After login, this site stores your display name, your patron status, and the access tokens needed to keep you logged in. This is kept separately for each of the two areas. The cookie is stored for as long as you stay logged in (up to 30 days). To make sure your patron status is still current, it is re-checked with Patreon in the background at most once every 24 hours. Logging out of one area does not affect the other.

In the shop, the same login is used to check whether patron benefits (such as a discount) apply to your order.

e) Contact form

When you use the contact form, your name, your email address, the chosen topic and your message are sent to me by email. The email is delivered through the email service Brevo (Paris, France). The message is not stored on this website's server. I use your data only to answer your request and keep the email only as long as needed for that.

f) Shop orders

When you place an order, I need your name, your postal address, your country and your email address, plus an optional note. I use this data only to process, ship and support your order.

Payment is handled by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). You are redirected to PayPal, and the payment itself is handled under PayPal's own privacy policy. After payment, PayPal sends me the payment confirmation, the email address of your PayPal account and the shipping address you chose there.

Your order is stored on this website's server. Order confirmations and shipping notifications are sent to you by email through Brevo (Paris, France). Order records are kept for 10 years, as required by Swiss law for business records.

g) Requests from Patreon supporters

Some Patreon supporters receive a private link to a request form from me. That form asks for the name and email address used on Patreon, the number of prints requested and an optional message. This data is stored on this website's server and sent to me by email through Brevo (Paris, France). It is used only to check the request and to issue a discount code, and it is kept for at most 2 years.

h) Guestbook

The guestbook on this site is provided by an external service, SmartGB (smartgb.com), and is embedded as a frame from their servers. When you open the guestbook page, your IP address is transmitted to SmartGB. Any information you enter into the guestbook (such as a name and a message) is stored and processed by SmartGB on their servers, and is shown publicly. This data is not stored on my own server, and is handled under SmartGB's own privacy terms. Please do not enter sensitive personal data. You can ask to have your entry removed at any time using the contact above.

3. Hosting

Apart from the third-party services named above, this website is hosted on a private server located in Switzerland, where the data described above is processed.

4. Services in other countries

Some of the services named above process data outside Switzerland: Patreon in the United States, PayPal in Luxembourg and Brevo in France. Data is only shared with them to the extent described in section 2. No data is sold or used for advertising.

5. Data security

Data is transmitted over an encrypted connection (HTTPS).

6. Your rights

You have the right to ask what personal data is stored about you, to have inaccurate data corrected, and to request deletion, within the limits of applicable law. To exercise these rights, use the contact in section 1. You also have the right to lodge a complaint with a data protection authority.

7. Changes

This Privacy Policy may be updated when the website changes. The current version always applies.

Last updated: 29 September 2026