Privacy
A small-data approach.
This site collects what is needed to answer a commission inquiry, protect the form from abuse, and understand the gallery in aggregate—nothing more.
Inquiry details
When you submit the form, your name, email, inquiry type, message, optional project details, and any referenced artwork are used to review and reply to your request. They are delivered by Resend to Pete Nawara's private inbox. They are not added to a marketing list or sold.
Inactive inquiry correspondence is reviewed for deletion after 12 months. Records needed for an active project, accounting, dispute resolution, or a legal obligation may be kept longer.
Abuse prevention
The form uses short-lived, one-way hashes derived from network, email, and message signals to limit repeated submissions. The raw message and email address are not written to abuse logs. The form may ask you to complete a Cloudflare Turnstile managed verification check. Abuse records expire automatically according to the retention windows in the site's operational runbook.
Anonymous measurement
The site does not load a third-party page-view analytics script. At reviewed gallery and inquiry interactions, the browser can send an event name and a small set of categorical fields to the site's own measurement endpoint. Allowed fields are limited to catalog or collection IDs, inquiry type, button placement, catalog-versus-generic origin, and coarse validation or challenge categories.
The endpoint writes only daily aggregate counts to Upstash. It does not create individual event rows or store a visitor identifier, IP address, name, email address, message or subject text, budget or project details, challenge data, free-form artwork text, or a full URL or referrer. Daily aggregate keys expire automatically within 45 days and use 35 days by default.
Only reviewed, non-personal campaign source, medium, and name labels can be held in the browser's session storage. They normally disappear when the current tab session ends and are not written into the daily aggregate counters. The site does not use analytics cookies, cross-site identifiers, session replay, or a persistent browser profile.
Because this measurement is first-party, aggregate, and does not use analytics cookies or cross-site identifiers, the site does not currently show an analytics consent banner. The form itself always asks you to choose whether to submit your inquiry details.
Processors and your choices
Netlify hosts the site; Resend delivers inquiry email; Upstash stores short-lived abuse-prevention hashes and daily aggregate counters; and Cloudflare provides verification when the form requests it. Their handling is also governed by their respective privacy terms.
To ask what inquiry data is held, request correction or deletion, or use an accessible fallback, email hello@petenawara.com.
Effective August 13, 2026.