Privacy Policy

Last updated: December 1, 2025

This privacy policy explains how Aaron Penne ("I", "me", or "my") collects, uses, and protects your information when you visit aaronpenne.io (the "Site").

Information I Collect

Email Subscriptions

If you subscribe to my newsletter, I collect your email address and optionally your name. This information is stored in a Cloudflare D1 database (a secure, serverless database hosted in the United States).

I use your email address solely to send occasional updates about my artwork, exhibitions, and new releases. I do not sell, share, or rent your email address to third parties.

Print Purchases

When you purchase a print through the Site, payment processing is handled entirely by Stripe. I do not collect, store, or have access to your credit card information. Stripe processes your payment securely and provides me only with the information needed to fulfill your order (such as shipping address).

Web3 Wallet Connection

The Site includes an optional Web3 page at /web3/ where you can connect a cryptocurrency wallet. This feature uses Privy for wallet authentication. If you choose to connect a wallet:

• Your wallet address is used only to display your ETH balance (fetched via Etherscan API)
• Wallet addresses are not stored on my servers
• This feature is entirely opt-in and only loads if you visit the /web3/ page

Rate Limiting

To prevent abuse of the Site's serverless functions, I temporarily store IP addresses for rate limiting purposes. This data:

• Is stored in a Cloudflare D1 database
• Uses a 60-second sliding window
• Is automatically deleted after the window expires
• Is not linked to any personal identity or user account

What I Don't Collect

• No cookies: This Site does not use cookies
• No analytics: I do not use Google Analytics or any other tracking services
• No tracking pixels: There are no third-party tracking scripts on this Site

The Site uses browser localStorage only for:

• Remembering your subscription status (so you don't see the form again)
• Service worker caching for offline functionality

How I Use Your Information

I use the information I collect to:

• Send newsletter updates to subscribers
• Fulfill print orders
• Prevent abuse of Site functionality
• Improve the Site experience

Your Rights

You have the right to:

• Unsubscribe from the newsletter at any time by contacting me directly
• Request deletion of your email from my subscriber list
• Access information about what data I have stored about you

To exercise any of these rights, please contact me at the email address listed on my Info page.

Data Security

I take reasonable precautions to protect your information:

• Email data is stored in Cloudflare's secure D1 database infrastructure
• All Site traffic is served over HTTPS
• Payment data is handled by Stripe's PCI-compliant systems

Third-Party Services

This Site uses the following third-party services:

• Cloudflare: Hosting, CDN, and database services (Privacy Policy)
• Stripe: Payment processing (Privacy Policy)
• Privy: Wallet authentication on /web3/ page (Privacy Policy)
• Etherscan: Blockchain data for wallet balance display (Terms)

International Visitors

This Site is hosted in the United States. If you are visiting from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

Changes to This Policy

I may update this privacy policy from time to time. Any changes will be reflected on this page with an updated revision date.

Contact

If you have questions about this privacy policy, please contact me through the information on my Info page.