Who is responsible

Maranda Mathis runs this site and decides how the information described here is used. Write to Show the address about anything on this page.

What is collected

Only what a small studio needs to answer you and finish what you asked for.

• What you type. Your name, your email address, and anything you write in a form on this site.
• The photographs you send. Reference pictures uploaded with a request, including pictures of people where you choose to send them.
• What a payment leaves behind. Donations and purchases are handled by a payment provider. We receive a record of the amount, the date, and the name and email you gave them. We never see or store your full card number.
• What the server writes down. Your IP address, the browser you used, which pages you asked for and when, in ordinary web-server logs.
• What cookies hold. Described in Cookie Policy.

Why it is held, and on what footing

• To reply to you and to carry out work you asked for — because we are performing an agreement with you, or taking the steps you asked for before one.
• To keep records of money received — because the law requires those records to be kept.
• To keep the site working, secure, and free of abuse, and to show finished work in a portfolio — because we have a legitimate interest in doing so, weighed against your privacy.
• Anything else is done only if you agree to it, and you may withdraw that agreement at any time.

The photographs you send

Reference photographs are used to draw the piece you asked for and to talk to you about it. They are not sold, not passed to anyone else, and not used to train any machine-learning or artificial-intelligence system.

They are kept while the work is live and for 12 months afterwards in case you come back about it. Ask sooner and they are deleted sooner. A photograph is shown publicly only with your permission — see Copyright & Image Use.

Who else sees it

A few suppliers handle information on our behalf, each only for the job they do, and none of them may use it for their own purposes.

• The company that hosts this site and its backups.
• The payment provider that takes donations and payments.
• The service that carries our email.
• Anyone we are legally obliged to tell, such as a tax authority or a court order.

Your information is never sold, rented, or traded, and it is never shared for cross-context behavioural advertising.

How long it is kept

• Enquiries that did not become work: 12 months.
• Records of work done and money received: 7 years, because tax records must be kept.
• Server logs: a short period, then overwritten.

Where it is held

The site and its backups sit on servers in the United States. If you write to us from elsewhere, what you send is transferred there, either because it is necessary to do what you asked or because you agreed to it.

What you can ask for

Wherever you live, you may ask for any of the following, and it costs nothing to ask.

• A copy of what is held about you.
• A correction, if something is wrong.
• Deletion, where there is no longer a reason to keep it.
• A pause on using it while a disagreement is sorted out.
• An objection to a use that rests on legitimate interests.
• A portable copy, in a form another service can read.

Write to Show the address and you will have an answer within thirty days. You will not be treated any differently for asking.

If you are in the United Kingdom or the European Economic Area you may also complain to your national data protection authority. If you are in California, you have the rights to know, delete and correct set out above; we do not sell or share personal information, and we honour an opt-out preference signal sent by your browser.

Children

This site is not meant for children under 16, and we do not knowingly collect anything from them. If you believe a child has sent us something, write to Show the address and it will be deleted.

Keeping it safe

The site is served over an encrypted connection, access to what is stored is limited to those who need it, and passwords are never stored in a readable form. No site can promise perfect security, and we do not.

Changes to this policy

If this policy changes, the new version is posted here with a new date. Last updated August 29, 2026.