Privacy Policy

Effective date: April 11, 2026

ChrisPaintsPixels ("I", "me", or "my") is operated by me, Chris. This page informs you of my policies regarding the collection, use, and protection of personal information when you use my site.

Information I Collect

When you use my contact form, I collect the following information:

• Your name
• Your email address
• Subject line (optional)
• Your message

How I Use Your Information

The information you submit through the contact form is used solely to:

• Read and respond to your message
• Communicate with you about your inquiry

I do not use your information for marketing, advertising, or any purpose other than responding to your contact submission.

Data Storage and Security

Your contact form submissions are stored in a secure database. I take reasonable measures to protect your personal information, including:

• CSRF protection to prevent unauthorized form submissions
• Rate limiting to prevent abuse
• Input validation and sanitization
• Secure session handling with HTTP-only cookies

Cookies

This site uses a session cookie that is required for the contact form to function properly (CSRF protection and rate limiting). This cookie is:

• HTTP-only (not accessible to JavaScript)
• Secure (transmitted only over HTTPS)
• SameSite Strict (not sent with cross-site requests)

I do not use tracking cookies, analytics services, or third-party advertising cookies.

Third-Party Sharing

I do not sell, trade, or share your personal information with any third parties.

Data Retention

I retain contact form submissions for as long as necessary to respond to your inquiry. You may request deletion of your data at any time by contacting me.

Your Rights

You have the right to:

• Request access to the personal data I hold about you
• Request correction of any inaccurate data
• Request deletion of your data
• Withdraw consent for data processing

To exercise any of these rights, please reach out through my contact form.

Information for European Visitors (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Lawful Basis for Processing: I process your personal data based on the following lawful bases:

• Consent — When you voluntarily submit your information through my contact form, you consent to its processing for the purpose of responding to your inquiry.
• Legitimate Interest — I have a legitimate interest in securing my website against spam and abuse (e.g., CSRF protection, rate limiting).

Your GDPR Rights: In addition to the rights listed above, you also have the right to:

• Request a portable copy of your data in a structured, commonly used format (data portability)
• Object to or restrict the processing of your personal data
• Lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully

Data Transfers: My website is hosted in the United States. By submitting your information, you acknowledge that your data will be transferred to and processed in the United States.

Data Protection Contact: For any GDPR-related requests, please reach out through my contact form. I will respond to your request within 30 days.

Information for California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

Your CCPA Rights:

• Right to Know — You have the right to request what personal information I have collected about you, the categories of sources, the purpose for collection, and any third parties it has been shared with.
• Right to Delete — You have the right to request that I delete any personal information I have collected from you.
• Right to Non-Discrimination — I will not discriminate against you for exercising any of your CCPA rights.

Do Not Sell My Personal Information: I do not sell, rent, or trade your personal information to any third parties. I have not sold any personal information in the preceding 12 months.

To exercise your CCPA rights, please reach out through my contact form. I will verify your identity and respond within 45 days.

Children's Privacy

This site is not directed at children under the age of 13. I do not knowingly collect personal information from children. If you believe a child has submitted information through my contact form, please contact me and I will promptly delete it.

Changes to This Policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date.

Contact Me

If you have any questions about this privacy policy or your personal data, please reach out through my contact form.