Privacy Policy
Last updated October 27, 2026
Noi-Noi Paints (“I”, “me”, “the site”) is an art business run by Tina Graves, with this website built and operated by TIMBUKTU LLC in Virginia, USA. This page explains what information the site collects and why.
What I collect
- Contact form: your name, email, optional phone number, contact preference, topic, message and optional coupon code. It is emailed to me so I can reply, and a confirmation is emailed to you. Emails are sent through Resend. Please never include card or Social Security numbers.
- Anti-spam: Cloudflare Turnstile checks that you are a person. It may process your IP address and browser details to do so. The site also keeps short-lived limits (a few messages per day) tied to a signed cookie, a scrambled (hashed) form of your IP address, and a scrambled form of your email address. Raw IP addresses are not stored.
- Shop and orders: when you buy, your name, email, phone (optional), shipping and billing address, and what you ordered are collected so I can ship your order and email you about it. Payment is handled by Stripe on its own secure page; your card details go directly to Stripe and are never seen or stored by this site. Your cart is kept only in your own browser until you check out. Order records are kept as long as needed for shipping, support, taxes and accounting.
- Visit counts (only if you allow Analytics): anonymous page-view counts (page, referring site, country, device type) and Cloudflare Web Analytics. No advertising and no cross-site tracking.
Cookies
A small card appears a few seconds after the page loads. Accept saves your choices; Decline sets no cookies at all, and the contact form stays locked until you allow at least the essentials. You can change your mind any time with Cookie Settings in the footer.
| Cookie | Type | Purpose | Lasts |
|---|---|---|---|
nnp_consent |
Necessary | Remembers your cookie choices. | 180 days |
nnp_sub |
Necessary | Signed, HttpOnly cookie that enforces the contact-form cooldown and daily limit. | 24 hours |
cf_* / __cf_* |
Necessary | Cloudflare security and bot protection, only if needed. | Session to 30 min |
nnp_pref |
Preferences (optional) | Remembers your preferred contact method and first name for the contact form. | 180 days |
| None | Analytics (optional) | Anonymous visit counts and Cloudflare Web Analytics. These do not set a cookie. | n/a |
How information is used and shared
Your message is used only to answer you and to run the business. I do not sell your information. Service providers that handle data on my behalf: Cloudflare (hosting, security, analytics), Resend (email delivery), Zoho (email inbox) and Stripe (payment processing and fraud prevention).
Your choices and rights
You may ask to see, correct or delete the information I hold about you, including under the Virginia Consumer Data Protection Act and, where they apply, the California Consumer Privacy Act. Email [email protected] and I will respond within 45 days. Messages are kept only as long as needed to help you and meet business or legal needs.
Children
This site is not directed to children under 13, and I do not knowingly collect their information.
Changes
If this policy changes, the date above will change.