Privacy & Cookies
Last updated: 25 October 2026
Who is responsible
This website is run by Deepti Dasika, Amsterdam, the Netherlands, trading as D.ArtBeat (the “controller”). Questions or requests about your data: hello@d-artbeat.studio.
The short version
- No advertising, no tracking cookies, no social-media widgets, no externally loaded fonts. The only external script is Cloudflare's cookieless Web Analytics (see below).
- We only process what's needed to show paintings, count likes and publish comments you choose to write.
- We never sell your data.
What we collect and why
Comments
If you post a comment we store the name you enter, your comment text, the painting it's about, the date/time, and a pseudonymised code derived from your IP address (a salted one-way SHA-256 hash; we do not store the IP itself). We do not ask for your email address. Comments are held for review and, once approved, your name and comment are published on the painting's page.
Legal basis: your consent (Art. 6(1)(a) GDPR), given with the checkbox on the form, for publishing your name and comment; our legitimate interest (Art. 6(1)(f)) in preventing spam and abuse for the IP code. You can withdraw consent at any time and we'll remove your comment.
Likes
When you press the heart we store the painting and the same kind of pseudonymised IP code, so each visitor is counted once. Your browser also remembers locally (see “Cookies and local storage”) that you liked it. Legal basis: legitimate interest in an honest like count.
Emails you send us
If you email us (e.g. an enquiry about a painting) we use your message and address to reply and, if relevant, to arrange a sale. Legal basis: steps prior to a contract / contract (Art. 6(1)(b)) or legitimate interest in answering you.
Technical data processed by our host
The site is hosted on Cloudflare (Pages, Workers/Functions, D1 database). Like any web server, Cloudflare processes your IP address, browser user-agent, requested URL and time to deliver pages, protect against attacks and keep short-term logs. We do not use these logs for profiling. Legal basis: legitimate interest in running a secure website.
Visitor statistics (Cloudflare Web Analytics)
Our host adds Cloudflare Web Analytics, a privacy-first statistics script loaded from static.cloudflareinsights.com. It sets no cookies, uses no local storage, does not fingerprint or track you across sites, and gives us only aggregate figures (page views, referrers, country, browser, page-load speed). Your IP address is processed by Cloudflare to deliver the request but is not stored in these statistics. Legal basis: legitimate interest in knowing, in aggregate, how the site is used and performs.
How long we keep it
- Comments: until you ask us to remove them or we remove the painting/site. Unapproved comments are deleted when moderated.
- IP code on comments: deleted automatically after 30 days (used only for the 10-minute rate limit and abuse handling).
- Likes (painting + IP code): kept as long as the like is counted; ask us and we'll delete yours.
- Emails: as long as needed to handle your enquiry or sale, and as required by Dutch tax law for sales records (7 years).
- Web Analytics: aggregate statistics only, kept by Cloudflare for up to 6 months.
- Cloudflare technical logs: per Cloudflare's own retention, typically a few days to a few weeks.
Who receives it
Only Deepti Dasika and our hosting provider Cloudflare, Inc., acting as processor under its Data Processing Addendum. Published comments (name and text) are visible to everyone. We don't share data with advertisers or data brokers, and we don't sell it.
International transfers
Cloudflare is a US company with a worldwide network, so data may be processed outside the EU. Cloudflare is certified under the EU-US Data Privacy Framework and also uses the EU Standard Contractual Clauses. Our database is currently hosted in a North-American Cloudflare region.
Your rights
You have the right to access, rectify or erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting earlier processing). Email hello@d-artbeat.studio; we'll answer within one month. Because we don't store raw IPs, please tell us which painting and roughly when you commented or liked. You can also complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
We make no automated decisions or profiles about you. You don't have to give any data to view the site.
Cookies and local storage
We set no cookies and use no tracking cookies or cross-site tracking. We only use your browser's local storage for things that are strictly necessary for features you ask for, which the Dutch Telecommunications Act (ePrivacy) allows without consent:
| Name | Type | Purpose | Kept |
|---|---|---|---|
liked:<painting> | localStorage | Remembers that you liked a painting so the heart stays filled and you don't count twice | Until you clear your browser storage |
privacy-notice | localStorage | Remembers you dismissed the privacy notice | Until you clear your browser storage |
tok | sessionStorage | Admin sign-in for the artist only (not used for visitors) | Until the tab is closed |
Cloudflare may set a strictly necessary security cookie (such as __cf_bm) only if it detects suspicious traffic. You can delete local storage any time in your browser settings; the “Cookie settings” link in the footer shows this notice again.
Changes
If we change how we use data we'll update this page and the date above.