Small print

Privacy

What this site collects, which companies process it and why, how long it is kept, and how to have it deleted.

Draft — owner and legal reviewLast updated: [Owner to confirm the date]

In short

  • Browsing is measured with Google Analytics and the Meta Pixel, and the owner gets a short notice for each new visit.
  • When you buy a print, your details go to Stripe for payment and to Prodigi, the print lab, for delivery. Card details never touch this site.
  • What you type in the AI Studio goes to Anthropic and Replicate to make the image. Nothing is published unless you choose Hang it on the Visitor Wall.
  • Unpaid checkouts are deleted after 24 hours and paid orders after 90 days.
  • To have something deleted, or an image taken down, email [email protected].

What we collect, and when

When you browse

Google Analytics and the Meta Pixel record the pages you visit and shopping events: paintings and doodles viewed, prints added to the cart, checkouts started and orders paid, with their values. They set their own cookies.

Your visit activity (the pages you open, the paintings and prints you look at, and actions such as adding a print to the cart), with how you arrived (for example “Instagram” or “Google”), is sent to the owner’s private Telegram chat with your approximate city and country and the type of device (for example “iPhone · Safari”), both from Cloudflare, which hosts the site. Your IP address is not included, and any record of the visit kept on our server is deleted after 3 days.

When you buy a print

At checkout you give your email, name and delivery address, and optionally a phone number and a note. They are stored with your order. Stripe receives your email, name and note, and asks for the delivery address and your card details on its own page; card details never reach this site. Prodigi, the print lab, receives your name, email and delivery address to print and deliver the order.

For measuring ads, your email, phone, name, city, province or state, postal code and country are hashed (SHA-256) on our server before they are sent to Meta, with your IP address and browser details.

The owner gets a notice for each order with its number, your email, the number of prints, the total and the approximate city and country it came from. Adding a print to the cart and starting a checkout also send the owner a short notice with the print or the cart total, and the approximate city and country.

Order emails (confirmation, shipping, delivery) are sent through Resend.

When you write to Jamal

The contact form sends your name, email, topic and message to [email protected] through Resend. The owner also gets a notice with your name, email, topic and the first 300 characters of the message. Your email and name are hashed and sent to Meta as a “Contact” event, with your IP address and browser details.

When you use the AI Studio

Your idea, style and palette go to Anthropic, which rewrites them as a prompt and suggests a title, and to Replicate, which makes the image with a model trained on Jamal’s paintings and doodles. The owner gets a notice with the title, style, palette and the approximate city and country. Your images are kept on your device, not on our server.

If you choose Hang it on the Visitor Wall, the image, its title, your idea and prompt, the style and palette, and the name and Instagram handle you give become public on jamalabstracts.ca. They are saved in the GitHub repository the site is published from, and may be sent through Zapier and Buffer to appear in an @JamalAbstracts Instagram story. The name you give is hashed and sent to Meta.

If you order a print of an AI image, the image file is stored for 90 days so the print lab can print it.

Who processes it

These companies receive personal information from this site. Each handles it under its own privacy policy.

Processors, what they receive and why
CompanyWhat they receiveWhy
Google Analytics 4Pages visited, shopping events, device and approximate location; cookies _ga and _ga_…Counting visits and seeing what works
Meta: Pixel and Conversions APIShopping events; cookies _fbp and _fbc; at checkout and on the contact form, hashed contact details, your IP address and browserMeasuring ads on Facebook and Instagram
TelegramThe owner’s notices: visit activity with approximate city, country and device type (never the IP address), cart and checkout activity, orders, contact messages and AI Studio images, as described aboveSo the owner hears about activity on the site
ResendContact messages; order, shipping and delivery emails with your name, email and order detailsSending email
StripeYour email, name and note, the prints ordered, and the delivery address, phone and card details you enter on its pagePayment and sales tax
ProdigiYour name, email and delivery address, and the print filesPrinting and delivery
AnthropicYour idea, style and palette in the AI StudioRewriting the idea as a prompt and suggesting a title
ReplicateThe promptMaking the AI image
GitHubImages hung on the Visitor Wall, with their title, idea, prompt and the name and handle givenThe site, Visitor Wall included, is published from a GitHub repository
Zapier, Buffer and InstagramA hung image, its title, and the name and Instagram handle givenPosting it as an @JamalAbstracts Instagram story
CloudflareEvery request to the site (IP address, browser); orders and AI print files are stored on CloudflareHosting, security and storage; where it is switched on, Cloudflare Web Analytics counts visits without cookies
Draft — owner to confirm

[Owner to confirm] Whether Cloudflare Web Analytics is switched on for jamalabstracts.ca (the site allows its script), and that Buffer is the step between Zapier and Instagram.

How long it is kept

Unpaid checkouts
Your details, the prints and your IP address are deleted after 24 hours. A failed payment is kept for 24 hours too.
Paid orders
Kept for 90 days after their last update (payment, shipping or delivery), then deleted from our order store. Stripe, Prodigi and Resend keep their own records.
AI print files
An AI image uploaded for printing is kept for 90 days.
Contact messages
Kept in the [email protected] mailbox until deleted.
Visit activity
The record of a visit (pages, items viewed, actions, approximate place and device type) is deleted from our server after 3 days.
Owner notices
The Telegram notices described above stay in the owner’s chat until deleted.
Visitor Wall images
Public until removed. Removing an image takes it off the site; earlier copies stay in the repository’s history.
Draft — owner to confirm

[Owner to confirm] The Google Analytics data retention setting (2 or 14 months).

On your device

The site keeps these items in your browser. Local storage stays until you clear it; session storage ends when you close the tab. The Meta cookies are sent with Meta events, and the Google cookies with Google Analytics; the rest stays in your browser unless you send it, for example the cart at checkout.

Storage keys, where they live and what they hold
KeyWhereWhat it holds
cartLocalThe prints in your cart
checkoutFormDataLocalThe delivery details you typed at checkout, so you don’t retype them; cleared once an order is paid
ja_pending_orderLocalThe order you are paying for (number, prints, subtotal), so the next page can confirm it; cleared once it is paid
userCreationsLocalYour AI Studio images on this device: titles, ideas and links
creatorName, instagramHandleLocalThe name and handle you gave when hanging an image, to fill them in next time
ja_lightLocalLamp on or off (North light)
ja_motionLocalMotion: Full or Calm, when you chose one
ja_gl_tierLocalThe 3D quality this device can handle
ja_gl_lostSessionNotes that this tab’s 3D view stopped, so it is not tried again until the tab closes
ja_visit_trackedSessionThat this tab’s visit was already reported
ja_visit_idSessionA random number for this tab’s visit, so its pages are grouped into one notice; it holds nothing about you
ja_visit_seqSessionA count of the activity batches and events this tab’s visit has sent, so none is sent twice; it holds nothing about you
ja_visit_pendingSessionVisit activity from a page you left before it was sent (the same events as above), so the next page can send it; removed once sent
ja_visit_logSessionThis tab’s visit so far (the same events as above: pages, time on each, what you opened, searched or added to the cart), so the owner’s visit summary stays up to date; it ends with the tab
ja_visit_msgSessionThe number of the owner’s visit summary for this tab and its check code, so it is updated rather than sent again; it holds nothing about you
ja_last_artSessionThe last painting or doodle you opened, for the way back
ja_lampSessionWhere the lamp was, so it stays put between pages
ja_visitors_cacheSessionThe Visitor Wall list, for one minute
ja_introSessionThat the signature has already written itself in this tab
ja_studio_job, ja_studio_printSessionAn AI Studio image still being made, so a reload can pick it up; whether printing AI images is available
ja (database)IndexedDBYour last 12 AI Studio images, as files on this device
_fbp, _fbcCookiesSet by the Meta Pixel on jamalabstracts.ca
_ga, _ga_…CookiesSet by Google Analytics on jamalabstracts.ca

This device

Empties the cart and removes everything in the table above that this site stored in this browser.

Your choices

  • You can block cookies and clear site data in your browser’s settings; the site still works, though the cart and your settings will be forgotten.
  • The AI Studio never publishes anything unless you choose Hang it on the Visitor Wall.
  • The phone number and the note at checkout are optional.
Draft — legal review

[Legal review] A consent banner for visitors in the EU and the UK (and Quebec’s Law 25), with a footer link to change consent, before analytics and the Pixel load.

Questions and deletion

To see, correct or delete what we hold about you, or to take an image off the Visitor Wall, email [email protected]. For an image, include its link; for an order, its number (it starts with HB-).

Jamal Abstracts is based in Ottawa, Canada.