Privacy.

Who you are dealing with

Arted is the product described on this site, at arted.day. The controller of the personal data described below, in the sense the GDPR uses that word, is [PLACEHOLDER: registered name and address of the legal entity].

If you want anything on this page explained, or you want your data out of our hands, the contact page is the way to say so.

What this policy covers

This page covers the website at arted.day and the waitlist behind it. It does not cover the Arted app, which is not released, and it does not cover any other site we link to.

It also does not cover the artworks and the museum records the product is built from. Those are not personal data about you, and they have a page of their own: rights and credits.

The website itself

The pages you are reading are static files. They load their own stylesheet and their own two scripts and nothing else. There is no analytics product, no tag manager, no advertising pixel, no embedded video, no web font from another company and no social widget. Loading this page contacts no server but ours.

Cookies

None. This site sets no cookies at all, which is why you were not asked to agree to any.

One thing stored in your browser

If you use the language picker, your choice is saved in your browser's local storage under the key arted.lang. It holds a language tag such as de, it never leaves your device, and it exists so that the front page opens in the language you picked last time. Clearing your site data removes it and nothing breaks.

Which language you are offered

The language you land in is decided by the language settings in your browser, and by your saved choice if you made one. It is never decided from your IP address. Where a request comes from is a different question from what a person reads, and we do not ask it.

Server logs

Our web server keeps ordinary access logs, in the way every web server does: the request, the time, the response, the browser's user agent string and the IP address the request came from. We use them to keep the site up and to see abuse. They are not joined to anything else, they are not used to profile anybody, and they are deleted on the schedule in section 9. The legal basis is our legitimate interest in operating a site that stays up.

The waitlist

If you put an address in the waitlist form, we store four things:

• The email address you typed, lowercased so that one person does not become two records.
• The language of the page you were on, so that the message you get back is in that language.
• Which surface sent it, which today is always the word landing.
• The date and time you joined, and later the date and time the welcome email was actually sent.

We do not store your name, because we do not ask for it. We do not store your IP address with the signup. We do not attach an advertising identifier to it, because there is no advertising here to attach one to.

Why we are allowed to hold it

Because you asked us to. In GDPR terms the legal basis is your consent, given by submitting the form, and you can withdraw it at any time by asking us to remove you. Withdrawing it does not undo the message we already sent, and it costs you nothing else.

What we will and will not do with it

We will email you when there is something to open, and occasionally before that if there is something worth saying about the build. We will not sell it, rent it, trade it, or hand it to an advertising network. We will not use it to find you on another service.

Joining twice

The form answers the same way whether or not your address is already on the list. That is deliberate: an answer that differed would let a stranger test whether a given address is on it.

The email we send

One message goes out when you join, in the language of the page you joined from. It contains no tracking pixel and no rewritten click-tracking links, so we cannot tell whether you opened it, and we do not try to.

Every message carries a way to come off the list. Asking us directly works just as well.

The app, when it opens

The app does not exist for the public yet, so it collects nothing from you today. This section is here so that the design is on the record before the fact rather than after it.

Arted is built to work without an account. The first launch creates an anonymous profile so that your reading and your progress have somewhere to live, and an email address is attached only if you choose to add one. What the app needs in order to function is your device's platform, its time zone, its language and the app version, because a daily rhythm has to know when your day starts. What you read, what you answer and what you save stays with your profile and is used to choose what to show you next.

There is no advertising in the design, so there is no advertising identifier and no third-party ad software development kit. Notifications are off until you turn each kind on.

This is the intent, and intent is not a policy. Before the app is released this page will be replaced by one that describes what the released app actually does.

Who else can see any of it

Two kinds of company touch this, and both only because they have to:

• The company that hosts the site and the database, which is where the waitlist record physically sits.
• The company that delivers the email, which needs your address to put a message in front of it.

They act on our instructions and for no purpose of their own. We do not sell personal data, and we do not share it for anybody else's marketing. We would hand something over if a valid legal order required it, and we would tell you unless we were forbidden to.

[PLACEHOLDER: name the hosting and email providers once they are chosen, so this is a list rather than a description.]

Where it is kept

The waitlist is stored in the European Union. If a provider we use processes data outside it, that transfer runs on the European Commission's standard contractual clauses or an adequacy decision, and we will name the provider here rather than describe it in the abstract.

[PLACEHOLDER: confirm the hosting region and the transfer mechanism once the provider is chosen.]

How long we keep it

Waitlist addresses

Until Arted opens and you have had your invitation, or until you ask to come off, whichever is first. If the product is abandoned the list is deleted rather than sold, and you are told before it happens.

Server access logs

Thirty days, then they are deleted.

Anything you send us by email

For as long as the conversation is live, and for up to two years after it, in case it comes back.

Your rights over it

If you are in the United Kingdom or the European Economic Area, the law gives you a set of rights over personal data we hold about you. We honour them wherever you live, because running two standards is how the lower one wins.

• See it. Ask what we hold and get a copy.
• Correct it. Tell us it is wrong and we will fix it.
• Delete it. Ask us to erase it, and we will unless we are legally required to keep it.
• Take it with you. Ask for it in a machine-readable form.
• Limit it or object. Ask us to stop a particular use.
• Withdraw consent. Coming off the waitlist takes one message and needs no reason.

Ask through the contact page. We answer within thirty days, usually much sooner, and we do not charge for it. We may ask you to confirm you control the address before we act on a request about it.

If you think we have handled your data badly you can complain to your national data protection authority, and you can do that without asking us first. In the United Kingdom that is the Information Commissioner's Office.

If you are in California

You have the right to know what we collect, to have it deleted, and not to be discriminated against for asking. We do not sell or share personal information as those words are defined in the California Consumer Privacy Act, and we have no financial incentive programme to disclose. The same contact route works.

Children

The waitlist is not for children. Do not join it if you are under 16, or under the age at which your country lets you consent to this on your own if that age is higher. If we learn that we hold a child's address we delete it, and you can tell us at the contact page.

Keeping it safe

The site is served over HTTPS. The database is not reachable from the public internet. Access to it is limited to the people who need it to run the service. The waitlist form is rate limited so that it cannot be used to test addresses at speed.

No one can promise perfect security and we are not going to. If a breach happens that puts you at risk, we will tell the relevant authority within seventy-two hours and we will tell you.

If you have found a security problem here, please tell us at the contact page before you tell anybody else. We will not threaten you for reporting it.

Changes to this page

The date at the top is the date this version was published. If we change anything that matters, and the app opening will be one of those, we change that date and we email the waitlist rather than hoping you come back to check.

How to reach us

Every request described on this page goes to the same place: the contact page. The address is shown there rather than written here, which keeps it out of the hands of the machines that read pages looking for addresses to sell.