Privacy Policy - EZDBud | How We Handle Your Data

Welcome Aboard

*adjusts tiny legal spectacles* OwO what's this? A privacy policy!

This Privacy Policy explains what personal information EZDBud (Dyan Zinny), operating ezdbud.com ("we," "us," "our," or the "Site"), collects when you visit the Site or request a commission, how that information is used, and the choices you have.

We are a small independent art business based in the Commonwealth of Massachusetts, United States.

By using the Site or submitting a commission request, you acknowledge that you have read this Policy.

If you do not agree with it, please do not submit any information to us. No hard feelings. We will still wave at you from the spaceship.

The Short Version

For those of you who scroll straight to the bottom. We see you. UwU

We do not sell, rent, or trade your personal information. Not to anyone, not for anything, not even for snacks.
We do not store your commission details on our web server. Your request is delivered to us by encrypted email and lives in our Proton Mail inbox.
Payments happen on PayPal. We only use your PayPal email address to send you an invoice. We never see your card or bank details.
No analytics, no advertising trackers, no tracking cookies. We genuinely do not know how many times you looked at the prices page. Your secret is safe.
You can ask us to show you, correct, or delete your information at any time by emailing zinny@ezdbud.com.

Who Is Responsible for Your Data

That would be us. *raises paw*

The party responsible for the personal information described in this Policy is EZDBud (Dyan Zinny), an independent artist located in Massachusetts, USA.

For any privacy question or request, contact us at zinny@ezdbud.com or his husband vuzeo@ezdbud.com who develops the site.

Information You Give Us

Please do not put your Social Security number in the commission description. We will not draw it. UwU

When you submit a commission request through one of our commission forms, you provide:

Your name. An online or character name is perfectly fine (honestly, we prefer it).
Your preferred contact method and handle, for example a Discord or Telegram username.
Your PayPal email address, used solely to send you an invoice. This is personal information and we treat it as such, responsibly and with the upmost care and standards.
Your commission description and any details you choose to include in it.
Reference images you choose to upload with your request.

The form also includes the commission type and listed price so we know what you are requesting.

Please do not include sensitive information you do not need to share, such as government ID numbers, passwords, payment card numbers, or health information in your description or images.

If you contact us directly by email, Discord, Telegram, or another platform, we receive whatever you choose to send us there.

Where Your Information Goes

A short flight path, and no stopovers on our server. *zooms*

The commission form. Your submission travels over an encrypted (HTTPS) connection to our web server, which immediately forwards it as an email to our Proton Mail inbox over an encrypted (TLS) connection. Our server does not save your answers or your images to a database or to its disk. Uploaded images are held only temporarily while the email is being sent and are discarded by the server as soon as the request finishes.
Proton Mail. Your request, including any reference images, is stored in our Proton Mail account, which encrypts stored messages. This email account is the only place we keep your commission details.
PayPal. To invoice you, we enter your PayPal email address into PayPal. PayPal processes your payment under its own privacy statement, and we never receive your card or bank account details.
Chat platforms. Conversations on Discord, Telegram, Bluesky, FurAffinity, or other platforms you choose are governed by those platforms' own privacy policies.

We do not copy your information into spreadsheets, customer databases, cloud drives, or any other system beyond our email account and PayPal records.

Information Collected Automatically

The boring but honest part. We promised honesty. :3

We do not use analytics, advertising pixels, or tracking cookies.

A few small technical things do happen behind the scenes to keep the Site secure and working:

Spam protection. To limit commission submissions to a few per visitor every ten minutes, our server keeps a one-way scrambled (hashed) version of the submitting IP address together with the submission times. It cannot be turned back into your IP address, is not linked to your name or any other details, expires after ten minutes, and is purged the next time the form is used.
Security cookie. When you open a commission form, a session cookie stores a random security token that confirms the submission really came from our form. It contains no personal information and is used for nothing else.
Error notes. If a submission is rejected or fails to send, our server records a short technical note (the reason, a random reference number, and in some cases the name of an uploaded file) so we can fix problems. These notes do not include your name, email address, or contact details.
Hosting logs. Like nearly every website, our hosting provider may automatically record standard server logs, such as IP address, browser type, the page requested, and the time, for security and operations. These are kept according to the provider's own practices, and we do not use them to identify visitors.
Your own browser. The homepage remembers, in your browser tab only, that you have already seen its intro animation. This stays in your browser, is cleared when you close the tab, and is never sent to us.

Third-Party Services

Some of our neighbors on the space station. They have their own rules. OwO

The Site is hosted by IONOS SE (ionos.de) in Germany.

Every page you visit and every commission form you submit passes through IONOS's servers, which also keep the hosting logs described above. IONOS processes this data on our behalf as our hosting provider.

Some pages also load content from other companies.

When that content loads, those companies may receive your IP address and basic browser information, and their own privacy policies apply:

Google reCAPTCHA (on the prices page and commission forms). Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.
Google Fonts, for the typefaces used across the Site.
Cloudflare (cdnjs), for icon fonts on some pages.
Spotify players and Ko-fi buttons on the homepage.

The Site also links to other websites, including Discord, Patreon, Storenvy, YouTube, and PayPal.

Once you follow a link and leave ezdbud.com, this Policy no longer applies and that website's privacy policy does.

How We Use Your Information

Strictly for art business. No funny business. *nods solemnly*

We use your information only to:

review and respond to your commission request;
communicate with you about your commission, including sketches, updates, and revisions;
send you an invoice through PayPal and confirm your payment;
create and deliver your artwork;
keep the business and tax records we are required to keep;
protect the Site and our commission forms from spam and abuse; and
comply with the law.

We do not use your information for advertising, profiling, or automated decision-making, and we will not add you to any mailing list. If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases: performing our agreement with you (your commission), our legitimate interests (keeping the Site secure), and compliance with our legal obligations (such as tax records).

When We Share Information

Your PayPal email stays between you, us, and PayPal. Pinky-claw promise.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We only disclose personal information:

to the service providers we need to run the commission process, namely Proton (email), PayPal (invoicing and payment), and IONOS (web hosting);
when required by law, such as in response to a valid subpoena or court order;
when necessary to protect our rights, our safety, or the safety of others; or
to a successor if the business is ever transferred, in which case this Policy continues to protect your information.

As our Terms of Service explain, we may post finished commissions publicly unless you request a private commission. When we do, we may credit you by your character or online name, but we never publish your PayPal email address or private contact details.

How Long We Keep It

Not forever. Even aliens tidy up their inbox eventually.

We keep commission emails and their attachments in our Proton Mail account for as long as needed to complete your commission, handle follow-up questions and revisions, and keep the business, tax, and accounting records that U.S. and Massachusetts law require.

Once those purposes are fulfilled, or when you ask us to delete your information and no legal obligation requires us to keep it, we delete it.

Invoice and payment records held by PayPal are retained by PayPal under its own policies.

How We Protect It

Shields up. *clutches clipboard protectively*

We protect your information by transmitting the commission form over HTTPS, forwarding it by encrypted email, keeping it in an email service that encrypts stored messages, not storing it on our web server, and limiting access to the people who work on your commission.

If a security breach ever affects your personal information, we will notify you and any required authorities as required by applicable law, including Massachusetts General Laws Chapter 93H.

Your Rights and Choices

Your data, your call. We just guard the door. *paws at you*

You may ask us at any time to:

tell you what personal information we hold about you and provide a copy of it;
correct information that is inaccurate;
delete your information, unless we must keep certain records by law; or
stop using your information for a particular purpose.

To make a request, email zinny@ezdbud.com with "Privacy Request" in the subject line.

To protect you, we may confirm your identity by replying through the same email address or contact handle you used with us, we aim to respond within 30 days.

Depending on where you live, such as certain U.S. states, the European Economic Area, or the United Kingdom, you may have additional rights under local law, and we will honor them.

We will never treat you differently for exercising your privacy rights.

Moreover, we will not use your information for purposes beyond what is stated here unless you give us explicit consent otherwise.

Because we do not track you across websites or sell your information, there is nothing to opt out of with "Do Not Track" or Global Privacy Control signals, but we respect them all the same.

Age Requirements

Commissions are for grown-up creatures only.

No exceptions, no excuses.

As stated in our Terms of Service, you must be 18 years of age or older to request a commission.

The site is not directed to children, and we do not knowingly collect personal information from anyone under 13. If we learn that we have received information from a minor through our commission forms, we will decline the request and delete that information.

If you believe a minor has sent us information, please contact us.

International Visitors

Commissioners from all over the galaxy welcome. o7

We are based in the United States, and our service providers may process information in other countries (for example, Proton is based in Switzerland).

By submitting a commission request from outside the United States, you understand that your information will be transferred to and processed in the United States and the countries where those providers operate.

Changes to This Policy

If we change the rules, we'll tell you. Fair is fair.

We may update this Policy from time to time.

When we do, we will change the "Effective" date at the top of this page, and if the changes are significant we will make that clear on the Site. The version posted here is always the current one.

Governing Law and Contact

Questions? Concerns? Just want to say hi? Our inbox is open. UwU

This Policy is governed by the laws of the Commonwealth of Massachusetts and applicable United States federal law.

If you have any questions about this Policy or how we handle your information, contact:

EZDBud (Dyan Zinny)
Massachusetts, USA
zinny@ezdbud.com