Legal and customer information

Privacy notice

Draft for review — canvas purchasing is disabled. The owner has supplied initial policies; return procedures, privacy practices and tax handling still require review before launch. This draft is not an active purchase offer.

Revision: fractilate-privacy-2026-09-26-draft6

Seller legal name
Brian Droncheff
Seller structure
Individual seller (sole proprietor)
Artist display name
Brian Theory
Jurisdiction
Santa Clara County, California, United States
Business contact address
221 Main Street #1254, Los Altos CA, 94023, USA
Support and privacy contact
contact@fractilate.com

Information from the current website

If you sign up for updates, the site processes the email address you submit. If you use message or image tools, it processes the content, image data and visibility settings needed for the requested operation; saved records may include message or encrypted data and associated metadata. Hosting and security services may process request and device information. Do not assume a private link or encryption feature makes all associated metadata anonymous. Retention and privacy-request procedures require the review described below.

Current service and planned commerce

Fractilate currently displays artwork and provides image and message tools. Canvas purchasing is disabled. This notice distinguishes the planned commerce flow from current availability; it is not a statement that a live order has been placed or fulfilled.

Information used for an order

When authorized commerce opens, Fractilate will process the selected artwork and product, price and currency, order and payment references, fulfillment status, customer contact and delivery details, and the versions and server receipt time of purchase-policy acceptance. Support correspondence and evidence may be needed to investigate a problem. Do not send payment-card details through support or message tools.

How information is used and shared

For commerce, Fractilate uses customer information to process payment, fulfill and track orders, provide support and refunds, keep necessary business records and protect the service. Information is shared with service providers only as needed for those tasks, with your permission, or when required by law. Stripe handles payment details; the gallery does not collect card numbers. Prodigi and delivery providers receive the details needed to print and ship. Hosting, database, storage and support services help operate the site. The planned commerce flow does not sell customer information or share it for other companies' advertising. Existing public-page analytics are described below and still require review.

Private links and security records

An order link grants access to a limited customer order summary; keep it private. Private checkout and order documents suppress analytics and use no-referrer and noindex headers. These controls do not remove URLs from hosting or support logs. Infrastructure token redaction, access controls, backups and incident procedures must be verified before commerce activation.

Analytics and cookie choices

Public pages currently include Google Tag Manager. Which tags and cookies its container deploys has not been verified in this policy review. A CookieScript consent banner and Cookie Settings control have been observed on public pages. Their handling of analytics, blocking before consent and withdrawal has not yet been verified. CookieScript is distinct from Cookiebot. The owner must review analytics, consent and withdrawal requirements and implement the appropriate controls before relying on consent-based tracking.

Retention and deletion

Approved retention periods are still required for order and accounting records, delivery/contact details, support evidence, payment/provider events, logs, backups and private print masters. This application does not claim that an automatic deletion schedule is configured. Deletion requests may need to be reconciled with applicable recordkeeping and dispute obligations. Brian will approve the final periods and procedure after engineering inventories the actual records, logs, backups and provider-held data.

Privacy requests and applicable rights

Depending on applicable law, you may have rights concerning access, correction, deletion, objection or restriction of your information. Brian handles these requests and consent withdrawal through contact@fractilate.com. The request verification procedure, record and backup inventory, retention schedule, deletion procedure and international-transfer arrangements must be completed and reviewed before commerce activation. No blanket compliance certification or unverified safeguard is asserted here.

Newsletters and promotions

Newsletters, launch updates and promotional emails require a separate affirmative opt-in. Buying a product or accepting purchase policies does not sign you up. If you opt in, your email may be used by Fractilate and its email delivery service to send the updates you requested. You can ask contact@fractilate.com to withdraw consent; promotional messages must also provide an unsubscribe option. The mailing service and unsubscribe process must be verified before promotional sending begins. Older email signup records are not automatically treated as permission for broader promotions.

Other features

If you use an image or message tool, the information needed for that feature is processed separately from order fulfillment. AI processing, if introduced, needs a description of its actual data flow; this notice does not assert that order data is sent to an AI provider.