Lonska.Art

Last updated 20 October 2026

Privacy policy

This policy covers the website lonska.art and the LonskArt app for iPhone, iPad and Android. In short: there are no accounts, no ads, no analytics and no tracking cookies, and your data is never sold or shared for marketing. The only personal data we receive is what you send when you write to Irina Lonskaya.

Who is responsible

  • The website and your messages: Irina Lonskaya, artist, Turku, Finland.
  • The LonskArt app: published on the App Store and Google Play by Alamak OY, Vihuri 4 A 9, 20900 Turku, Finland. Alamak OY also runs the website’s server for Irina Lonskaya.

For any question or request about your data, write to info@alamak.app.

Messages you send

Through the website form. What you type is stored: your name, email address, phone number (optional), your message and the painting you are asking about. Stored with it are the date and time, the page you sent it from, your browser type and a scrambled (hashed) form of your IP address, to help spot abuse. The message is saved in the website’s database and emailed to Irina Lonskaya’s inbox through Google’s email service. You don’t receive an automatic confirmation email and you are not added to any mailing list. Submissions that look automated are kept marked as spam and are not emailed.

Through the app. When you ask about or order a painting, the app opens your own email app with a message to Irina Lonskaya already filled in. Nothing is sent unless you send it, and the app itself does not receive or keep a copy. Your email then reaches Irina Lonskaya’s inbox like any other email.

Your message is used only to answer you and, if you buy or commission a painting, to arrange it. The legal basis is your request (Art. 6(1)(b) GDPR). Keeping the form free of abuse is a legitimate interest (Art. 6(1)(f) GDPR).

Visiting the website

  • Public pages set no cookies. There are no analytics, ads, social media trackers or embedded content from other companies; fonts and images come from this website.
  • The 3D gallery remembers in your browser that it has shown you the controls hint. This stays on your device; clearing the site’s data removes it.
  • Like any website, the server logs each request: IP address, date and time, the page requested, the page you came from and your browser type. The logs are used for security and troubleshooting (a legitimate interest) and deleted after 14 days. An address that sends too many requests in a short time is blocked for an hour and forgotten after a day.
  • The sign-in area for managing the website uses a cookie; it is only for Irina Lonskaya.

The LonskArt app

  • No account, ads, analytics, crash-reporting tools or advertising ID, and no access to your location.
  • The app downloads the list of paintings and their pictures from lonska.art. These requests appear in the server logs described above (IP address, date and time, and basic technical details sent with every request).
  • To show a painting on your wall, the app uses your camera: live, in augmented reality, or on a photo of your wall that you take or choose from your photos. This happens entirely on your device: camera images and photos are never uploaded, shared or kept. A photo you take is deleted as soon as the app has loaded it.
  • On Android, the augmented-reality view runs on Google Play Services for AR (ARCore), which is provided by Google and governed by the Google Privacy Policy.
  • Links to a painting (lonska.art/deeplink/…) open it in the app; the link is not sent anywhere else.
  • Apple and Google handle downloads and updates under their own privacy policies. They may give Alamak OY anonymous statistics, such as the number of downloads and crash reports from people who agreed to share them.

Who else handles data

  • DigitalOcean hosts the website and its backups on servers in London, United Kingdom. The UK is covered by an EU adequacy decision.
  • Google (Google Workspace and Gmail) delivers form messages and holds Irina Lonskaya’s inbox. Google may process data in the United States and is certified under the EU–US Data Privacy Framework.

Nobody else receives your data, and it is never sold, rented or used for advertising.

How long data is kept

  • Messages are kept as long as they are needed to answer you and to arrange any sale or commission that follows, and deleted when no longer needed. If you ask, your message is deleted straight away. If you buy a painting, the sales records are kept as long as accounting law requires.
  • Server logs: 14 days.
  • Backups: the website’s database is backed up daily and each copy is kept for 14 days; the hosting provider’s weekly backups of the whole server are kept for 4 weeks. Deleted data disappears from backups within that time.

Security

All connections use HTTPS. The database and backups are on a server that only Alamak OY can access, and the website’s sign-in uses hashed passwords and limits repeated attempts.

Your rights

Under the EU General Data Protection Regulation you can ask what data we hold about you, get a copy, have it corrected or deleted, limit how it is used or object to its use. Write to info@alamak.app; we reply within one month. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Children

The website and the app are not aimed at children, and we don’t knowingly collect data from them.

Changes

When something changes, this page is updated and the date at the top shows the latest version.