Privacy policy
Short, and without the legal fog: what we collect, why, where it sits, and how to ask us to delete it.
Updated 1 October 2026
What we collect
Only what you type into the booking form: your name, how to reach you (Telegram, WhatsApp, email — whichever you give), the workshop you chose, how many people, the dates that suit you, and a message if you wrote one. The site adds one thing to it automatically: how you first found us (see “How you found us” below). Nothing else is asked anywhere on the site: there are no accounts, no logins and no online payment.
Why
To reply to you and arrange the class. That is all. We run no mailing list, we do not pass or sell these details to anyone, and we do not advertise to you on the strength of them.
Where it goes
The enquiry is emailed to the studio; delivery is handled by Resend. The email also says how you found us. The server log keeps only the fact of the enquiry — workshop, number of people, page language and preferred dates. Your name, contact, message and the note on how you found us reach the log in exactly one case: if the email could not be delivered, so that the enquiry is not lost.
Spam protection
The booking form is protected from spam bots by Cloudflare Turnstile. To tell people apart from bots, it may process technical data about your browser and device. It never receives what you write in the form.
How long we keep it
The enquiry stays in the studio's mailbox for as long as it may be needed: until the class, and a while after, so we can go back to what was agreed. We have not set a fixed period, and we would rather not quote a number we do not keep to. Write to us and we will delete it sooner.
Server logs
Each request writes one technical line: method, page address (without anything after “?”), response code, response size, how long it took, IP address, the referring page, the browser string and a random request number we use to trace errors. Neither form contents nor cookies ever appear in this log.
Cookies and local storage
All our cookies are first-party: only this site can see them. The lang cookie remembers the language you chose, for a year. The ft cookie remembers how you first found us, for 90 days (more below). The lead_ok cookie lasts 10 minutes after you send the form, so that each enquiry is counted in our statistics only once. Your answer to the cookie banner is kept in your browser’s localStorage, is never sent anywhere, and is asked again after six months. Google Analytics cookies appear only after you press “Accept” (see “Analytics”). Finally, studio staff who sign in to the site’s admin panel get a session cookie (for up to 7 days) and a cookie for the sign-in form; visitors never do.
How you found us
If you first open the site from a link with campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content), or arrive from another website, we note it in a cookie called ft: the tags, the domain of the site that sent you (the domain only, such as instagram.com — never the page address), the first page you opened and the date. If you came directly, no cookie is set. It lasts 90 days, is never overwritten by later visits, and scripts on the page cannot read it. The server reads it only when you send an enquiry: it goes into the studio’s email, so we can tell which posts bring people to us. It goes nowhere else.
Analytics
We use Google Analytics to understand which pages are useful and where enquiries come from. Google’s script loads on every page, but until you press “Accept” it runs without cookies: every consent signal is set to denied, nothing is written to your device, and Google receives only anonymous signals about page views and clicks — with no identifier that could recognise you on your next visit. After “Accept”, Google Analytics sets the _ga and _ga_* cookies — for up to two years by default — to tell repeat visits apart. The legal basis is your consent (Article 6(1)(a) of the GDPR). “Decline” or the Esc key keeps analytics cookieless. You can change your mind at any time through “Cookie settings” in the footer: withdrawing consent is as easy as giving it — one tap. If you decline later, any Google cookies already set are no longer used; you can delete them in your browser settings.
What is not here
No advertising pixels, no embedded Instagram feed, no Google Maps iframe, no third-party video players. We serve the fonts from our own server, not through Google’s.
Your rights
You can ask to see, correct or delete anything we hold about you, and withdraw your consent to analytics at any time through “Cookie settings” in the footer. There is no procedure to it: write to us and we will do it.
How to reach us
For anything about this data — including asking us to delete it — write to us directly. Emiliya answers.