Skip to content

// Privacy

Privacy

This site is a shop window for a small studio, and it is built to need as little from you as possible. What follows is the whole of it — no summary hiding a longer version, and nothing here that a second document quietly contradicts.

Last updated 12 October 2026

Who you are dealing with

This site is run by Crisify — Cristian Ionas. One person decides what happens to anything collected here, and that person answers the address below.

If you only read the page

Loading a page does not create an account, does not identify you and does not require you to agree to anything.

The host — Microsoft, through Azure Static Web Apps — keeps ordinary server logs, as every web server does. Those hold your IP address, the page you asked for, your browser's user agent and the time. They exist so the site can be served reliably and so an attack is visible when one happens. They are kept up to 30 days, and they are not used to build a picture of you.

Cookies and analytics

Nothing optional is stored on your device unless you allow it first. That is the whole policy, and the code is written to make it true rather than to make it sound true.

The Google Analytics tag is not in this page when it loads. Your browser does not contact Google at all until you press Accept. If you do, Google Analytics 4 sets two cookies and records which pages you read, roughly where you are, and what device you are using. That is the only optional thing on this site, and it is the only thing the banner asks about.

It is handled by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and may be processed by Google in the United States. Analytics data is kept for 14 months. Google's own policy is here.

Every item stored on your device, optional or not, is listed by name in the cookie policy. You can change your answer whenever you like, and it takes exactly as many clicks as saying yes did:

If you get in touch

The contact form asks for your name, your email address, what the enquiry is about, a subject and a message. Send it and that is what arrives — there is no hidden field, nothing is added to a mailing list, and the form is not used to profile you.

Enquiries are kept as long as the conversation is live, and up to 24 months afterwards, because a conversation that goes quiet in March is often the same conversation in October. Ask and it goes sooner.

Booking a call goes through Calendly, on their site rather than this one. What you type there is covered by their privacy policy, and the calendar entry reaches me.

Fonts

The two typefaces are served from this domain. That is worth a paragraph because the usual arrangement is not: a site that loads fonts from a font CDN makes your browser fetch them from someone else's servers, which hands your IP address to that third party before you have agreed to anything and with no prompt that could reasonably gate it.

Hosting the files here removes the third party from the question instead of asking you to accept it — the better answer whenever it is available.

Who else sees any of this

The complete list. Anyone who can see anything about a visitor is on it, including the ones that only see them because of how the page is built.

Microsoft (Azure Static Web Apps)

Hosting provider

IP address, request URL, user agent and timestamp, in ordinary server logs

European data centres, under Microsoft’s standard data-protection terms

Google Ireland Limited (Google Analytics)

Analytics — only with your consent

IP address, pages viewed, approximate location, device and browser

May be handled by Google in the United States, under Google’s data-processing terms and standard contractual safeguards

Calendly

Booking tool — only if you choose to book a call

Whatever you enter on their page; the booking happens on calendly.com, not here

United States, under standard contractual safeguards

Email provider

Carries the message the contact form sends

Your name, email address and the message itself

Depends on the provider; European hosting where possible

Nothing is sold. Nothing goes to advertisers. There is no advertising on this site and no plan for any.

Nothing is decided about you automatically

No scoring, no profiling, no automated sorting of enquiries, no model deciding whether you are worth replying to. A person reads what you send.

What you can ask for

All of it is free, none of it is held against you, and you get an answer within a month. Write to [email protected].

  • See itA copy of whatever is held about you, and confirmation of whether anything is at all.
  • Fix itCorrection of anything wrong or incomplete.
  • Delete itRemoval, unless there is a concrete reason it has to be kept.
  • Pause itProcessing held while something is being disputed.
  • Take itWhat you gave, in a form a machine can read, for you or for whoever you name.
  • ObjectTo anything being done that you did not explicitly ask for.
  • Change your mindWithdraw consent at any time. The button above does it, and nothing that already happened lawfully is undone by it.

If an answer here does not satisfy you, most countries have a data protection authority you can complain to, and you never have to raise it here first.

Security, and what is simply not collected

The site is served over HTTPS only. There are no user accounts, no passwords and no payment details, which is the most effective security measure available: data that was never collected cannot leak.

Nothing sensitive is asked for — no health, beliefs, politics or anything of that kind. Please do not put any of it in the contact form.

The site is not aimed at children and does not knowingly collect anything from them.

Changes

If this changes materially, the date at the top moves and the cookie question is asked again rather than assumed. An answer you gave about one thing is never stretched to cover a new one.