Privacy · written from the code
This page describes what the site actually collects, taken from the routes that do the collecting. Three forms send anything at all: the newsletter box, the inquiry and commission brief, and the artist application. The rest of petrikivka.com is text and photographs.
Field by field
Every form also carries a hidden field named company. A submission that fills it is discarded and stored nowhere.
Your email address, and whether you were reading the English or the Ukrainian version. The stored row holds those two things, the word website as the source, and the status active. It exists so we can write to you when a class, an archive film or a master’s page opens.
Your name, email address and message. A brief adds whatever you type into organisation, project type, timeline, indicative budget and currency. The page you wrote from attaches the artist or the work you were asking about, so the message reaches the right person.
Your name, email address, the role you picked, any portfolio links you paste, your note, the language of the page, and the consent tick itself. An application arriving without that tick is refused by the server.
Each form posts to this site’s own server, which writes one row over HTTPS into a Supabase Postgres database, into tables whose names begin with petrikivka_. That database runs in the European Union, so your details rest on European servers under European law. The pages themselves are served by Vercel, which keeps ordinary web-server request logs of its own, outside our control.
When the database is unreachable, the form hands the same details to your own email app as a message already written out to hello@petrikivka.com. You decide whether to send it, and it then travels through your email provider.
The key your browser carries can add a row and can read back only the artist and artwork pages already marked published. Applications, inquiries and newsletter addresses are closed to it, so one visitor can never read another visitor’s submission, and neither can you. Reading them takes an administrator login to the database, and one person holds it: Oksana Pikush. These rows are never sold, and never handed to an advertiser.
The code sets no expiry date, so a row stays until a person deletes it. We clear it by hand once it has lain still for 24 months: a newsletter address that has stopped opening anything, a finished inquiry, an application already answered. Anything still in motion — a class you are booked into, a commission under way — stays for as long as the work does.
We count visits with Google Analytics 4 to learn which pages people read and which forms get sent. Until you press «Allow» on the notice at the bottom of the page, it runs in Google’s consent mode with cookies switched off: Google receives an anonymous signal that a page was opened, and nothing is written to your browser. Once you allow it, Google Analytics sets its own _ga cookies so a return visit can be told from a first one. Your answer to the notice is kept in this browser’s local storage so the question does not come back; clear this site’s data in the browser to be asked again. Advertising storage stays off for everyone, and the site embeds no tracking pixel. Both typefaces and every photograph come from this domain.
Your copy, your deletion
Write to hello@petrikivka.com from the address you used and say what you want. We will send you everything held under that address, or delete it and confirm in writing, within 3 working days. A reason is never required.
Everything described here is held by Oksana Pikush, a private person running this project from the Greater Toronto Area under no company name. The address above is the only one the project has, so a privacy question, a copy of your data or a request to erase it lands with Oksana herself. This page is rewritten whenever the code behind the forms changes; it was last checked against that code on 16 September 2026.
Write to us