Privacy Policy
Last updated: May 2026
As the owner of the website www.theflosedit.ee and its connected application art.theflosedit.ee (hereinafter collectively referred to as the “website”), your privacy and personal data protection are of the utmost importance to me. This privacy policy explains what data I collect, how I use it, and what your rights are.
1. Who I Am
My website address is: https://theflosedit.ee, and the associated e-gallery and visualization application is located at https://art.theflosedit.ee. The data controller is the flos edit.
2. What Personal Data I Collect and Why
Since theflosedit.ee is not a traditional e-commerce store and does not allow user registration, data collection is kept to a strict minimum.
- Comments: When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
- Cookies: If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
- Inquiry Forms: When you submit an inquiry (e.g., via the custom art commission or contact form), I use the submitted details (name, email, message content) solely to respond to you and provide the requested service.
3. Important Info: External Links and Purchases
Theflosedit.ee contains external links to third-party websites where the actual buying and selling process of the artworks takes place (for example, users are redirected to www.osta.ee to complete a purchase).
Note: I am not responsible for the content or privacy practices of these external websites. Once you leave our website and navigate to a partner’s platform, the specific privacy policy of that partner website applies.
4. Digital Certificates of Authenticity (art.theflosedit.ee)
Our ecosystem allows for the issuance and verification of digital certificates of authenticity for the artworks, securely managed via a Supabase database.
- Public Search: To verify authenticity, basic artwork technical specifications (such as title, dimensions in cm, year of creation, and unique certificate ID) are publicly searchable on the art.theflosedit.ee platform.
- Collector Privacy: The public certificate search never exposes or displays the buyer’s personal identity, purchase price, or physical location. All collector details remain strictly confidential.
5. Virtual Gallery and Augmented Reality (AR) Visualizer
The website features an AR visualizer tool that allows you to preview artwork at its actual scale inside your room using your device’s camera.
- Camera Access: Launching the AR tool prompts your web browser to request temporary access to your device’s camera. This permission is used exclusively to project the artwork onto your wall in real-time.
- No Data Storage: We do not record, store, transmit, or process your camera feed, room video, or any biometric data. All rendering happens live and locally within your browser. Camera access terminates instantly once you close the visualizer window.
6. Embedded Content from Other Websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you and use cookies according to their own regulations.
7. Who I Share Your Data With
I do not sell, trade, or share your personal data with third parties for marketing purposes. Data is only shared with trusted technical service providers essential to running this platform (e.g., web hosting, Supabase secure database management). Visitor comments may be checked through an automated spam detection service.
8. How Long I Retain Your Data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. Data received through inquiry forms is retained for as long as necessary for customer service purposes.
9. What Rights You Have Over Your Data
If you have left comments or submitted inquiries, you can request to receive an exported file of the personal data I hold about you, including any data you have provided to me. You can also request that I erase any personal data I hold about you. This does not include any data I am obliged to keep for administrative, legal, or security purposes.