Privacy policy

Introduction

No accounts, no newsletter, no advertising, and nothing sold. The site remembers a few preferences on your own device, counts visits with Google Analytics, and takes payments through Stripe. This page says what that means.

kritor.au is the website of KRITOR, the practice name of Melbourne artist Kristian Torcasio. Any question about this page, or about information the site holds about you, goes to info@kritor.au.

On your own device

To work as it should, the site keeps a few small settings in your browser. They are not cookies, they are never sent to anyone, and clearing your browser's site data removes them:

• kritor-theme — whether you chose paper or terminal mode.
• kritor-view — whether you last looked at the catalogue large, small or as a list.
• kritor-bag — what is in your bag, so it is still there on the next page.
• kritor-last-page — which room you were last in (for the length of one visit), so the right opening plays.

Counting visits (Google Analytics)

The site uses Google Analytics 4 to see which pages and works get looked at. It records the pages you view, the type of device and browser, roughly where in the world the visit came from (worked out from your IP address, which Google Analytics does not store), and how you arrived. It sets two cookies, _ga and _ga_…, to tell one browser from another over time. Advertising features and Google signals are switched off, and nothing from analytics is used to show you ads or to follow you elsewhere.

If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies are off unless you have agreed to them: Google Analytics runs in a mode that sets no cookies and sends only anonymous pings with no identifier. The checkout page does not load Google Analytics at all.

To opt out everywhere, use Google's opt-out browser add-on; blocking analytics in your browser works too, and the site does not need it to function. Google's own account of how it handles this data is at policies.google.com/technologies/partner-sites.

Buying a work

To buy something you give an email address (for the receipt), a delivery name and address, and, if you choose to, a phone number. Your card details go straight into fields supplied by Stripe, who take the payment; KRITOR never sees your card number. Address suggestions as you type are provided through Google Maps, which receives what you have typed so far.

The order is priced by a small service running on Cloudflare. It receives what is in your bag and your delivery country, creates the payment with Stripe, and keeps a record of which one-off works have sold. It uses your IP address only to limit abuse. KRITOR uses the order details to take payment, send the work to you, send a receipt, and keep the records the law requires. They are not used for marketing. How orders are shipped is on the shipping and returns page.

Where the site comes from

The pages are delivered by GitHub Pages (GitHub, Inc.), which — like any web host — sees your IP address and basic technical details when your browser asks for a page. The site's fonts, scripts and images are all served from kritor.au itself; there is no font or script network in between.

Who else sees it

Only the services named above, for the job described: Google (analytics, and address suggestions at checkout), Stripe (payments), Cloudflare (pricing the order) and GitHub (delivering the pages). Nothing is sold, and nothing is shared for advertising.

Keeping it

Order details are kept for as long as they are needed to deliver the work, deal with any problem with it, and meet legal and tax obligations. Analytics data is kept for a limited period set in the analytics account and is then deleted by Google.

Your rights

You can ask to see the personal information held about you, to have it corrected, or to have it deleted where the law allows, by writing to info@kritor.au. This applies under Australian privacy law and, if you are in the European Economic Area or the United Kingdom, under the GDPR, including the right to object. If you are not satisfied with the answer you can complain to the Office of the Australian Information Commissioner or to the data-protection authority where you live.