Privacy

This site, pamidordesign.co, is the portfolio of Dor Sharaby - Pamidor Studio - a designer working from Tel Aviv, Israel. For anything about your data, one address answers: dor@pamidordesign.co.

The short version: the site collects almost nothing, and nothing without telling you first.

If you write to me through the form, what you type - your name, email, phone if you add one, the reason you picked and your message - is delivered straight to my inbox. Resend, the service that carries the email, processes it in transit for that purpose.

I use those details to reply to you, and for nothing else. Writing to me does not put you on the drops list below - that one is opt-in and asked for separately. Nothing here is shared or sold. Write to the address above to see what I hold from you, correct it, or have it deleted.

Buying a piece happens on Stripe's own hosted checkout page - your card details go to Stripe, never to this site, which never sees and never stores them. Stripe passes back what fulfilling the order needs: what you bought, your name, email and shipping address.

Those details are used to ship your order and answer you about it, and for the records the law requires of a sale - nothing else. Not added to any list, not shared beyond Stripe and the shipping carrier, not sold.

The shop has one field that asks for an email address, and it does exactly what it says: it tells you when new work lands. Entering it stores three things - the address, the date, and which page you entered it on - in a private spreadsheet in my Google Drive. Google holds that file as my provider, under its own privacy policy. No one else has access to it.

That address is used to announce a drop and for nothing else: no newsletter, no forwarding, no selling, no other list. You can leave at any time by replying to one of those emails or writing to dor@pamidordesign.co, and the entry is marked and stops being written to - or removed entirely if you ask for that instead.

Two things count visits here, and only one of them asks first.

Vercel, which hosts the site, keeps an anonymous tally for everyone: which pages were opened, the site that sent you, your country and the kind of device. It sets no cookie and stores nothing in your browser. It tells one visit from another by a hash of the request that is thrown away within a day, so a visit cannot be tied to a person or followed across sites. In the same way, with no cookie, Vercel also measures how quickly each page loads and responds on real visits - the timings, and the page they were taken on. Both run from this site's own address, under Vercel's own privacy terms.

Google Analytics is the one the cookie notice asks about. If you accept, it counts visits in more detail: which pages get read, roughly where from, on what kind of device. I look at those numbers in aggregate - how many people, which work - not at individuals. Google processes this data as my provider, under its own privacy policy.

If you decline, or simply never answer, nothing from Google loads at all - not a script, not a cookie, not a request. That is how the site is built, not a promise: the Google code is only mounted after an explicit accept.

The site itself sets no cookies. It keeps one value in your browser's local storage to remember your cookie choice, and Google Analytics sets its cookies only after you accept:

Changed your mind? This clears your stored choice and Google's cookies on this site, and the notice asks again:

The site is served by Vercel. Like any host, it processes the technical side of a request - your IP address and the page you asked for - to deliver the site and protect it from abuse. That data stays on the plumbing level; the site builds no profile from it.

Under Israel's Privacy Protection Law - and the GDPR, if you are writing from the EU - you can ask to see, correct or delete personal information held about you. Here that realistically means two things: an email you sent me, and your entry on the drops list if you asked to be on it. Ask at dor@pamidordesign.co and it will be handled directly, no forms involved.

If the site ever starts collecting something new, this page changes first, and the cookie notice is versioned so it will ask for consent again rather than lean on an old answer.