Privacy Policy

Data Controller

ArtyEgg (Patrique), De Heuve 22, 8162 EZ Epe, The Netherlands. KvK 42007193.

Data Collected

• —Name (required for Limited and Atelier; optional for Signature)
• —Email address
• —Shipping address
• —City of NFC activation
• —Country
• —Payment data — processed by Stripe, not stored by ArtyEgg
• —GDPR consent record with timestamp

Data Processors

ArtyEgg uses the following data processors. Data processing agreements are in place with each:

• —Supabase — primary database and authentication (US/EU)
• —Sanity — content management (US/EU)
• —Stripe — payment processing (US/EU)
• —ActiveCampaign — email delivery (US, EU data residency available)
• —Make — non-critical automation (EU)
• —Google — analytics, via consent only (US/EU)
• —Sentry — error tracking and observability (US/EU)
• —Vercel — hosting (US/EU edge)
• —Cloudflare — DNS, CDN, security (US/EU edge)
• —UPS — shipping and fulfilment

Data Retention

Collector data is retained for as long as the ownership of an ArtyEgg object is active. On deletion request: name anonymised to "Private Collector" in the public ownership history (provenance timeline preserved). Email and all personal data deleted completely. This process is logged in the audit table.

Your Rights

Collectors have the right to access, correct, or delete their personal data. Contact ArtyEgg via the contact page.

Cookies & Analytics

ArtyEgg uses Google Analytics 4 for analytics, loaded only after explicit consent via the consent banner. No advertising cookies. No third-party tracking. Session functionality uses Supabase Auth — no third-party session cookies.