We treat your data the way we treat the forest — minimally disturbed, ethically harvested, never sold. This page explains what we collect, why, and what your rights are.
Last updated 17 September 2026 · Effective immediately
⟡ In one sentence
We collect only what each part of the site needs to work — no analytics, no advertising trackers, no selling your data, ever — and we tell you below exactly what goes where.
Who we are
Fungai Art is an independent herbal and artistic practice run by Robin Floræsta. Contact: robin@fungai.art. We are the data controller for personal information collected through this website (fungai.art).
What we collect — feature by feature
Visiting the site — our host (Netlify) processes your IP address and basic request data to deliver pages and protect the site. Server logs are kept briefly. Basis: legitimate interest (running a secure website).
Shop & orders — name, email, shipping address and the items you order, used to fulfil and ship your order and to send order emails. Card payments are handled entirely by Stripe; we never see your card number. Basis: contract; legal obligation (bookkeeping).
Find Your Formula — your quiz answers, which can include health-related information (for example medications, pregnancy, health conditions, sleep, how you feel, your age range) and any note you write. We store them securely in our database to compose your formula and, if you reserve it, to prepare it. An AI model (Anthropic’s Claude) assists the composition and writes your personal reading; under Anthropic’s commercial terms this data is not used to train its models. If you reserve a formula we also receive your name, email, city and country, and send a confirmation email. Basis: your explicit consent, given on the start screen — you can withdraw it at any time by emailing us, and we will delete your answers.
Dinner Experience enquiries — the name, email and message you send through the enquiry form are emailed to Robin. Basis: steps you ask for before a booking; legitimate interest in answering you.
Newsletter — the email address you subscribe with, used only to send Field Notes. Unsubscribe anytime, instantly. Basis: consent.
Community (Spore) — if you join: your email (for magic-link sign-in), the profile you create (name, bio, picture), and what you post, comment, send or RSVP to inside the community. Community administrators can see member email addresses to run the community. Basis: contract (providing the membership).
Foraging Map — only if you allow location: your position is used in your browser, and rounded to about 1 km before it reaches our servers to look up your place name, local weather and nearby species sightings. Questions you ask MYCO (the map’s AI guide) are processed by Anthropic together with that approximate location. On the homepage, if precise location isn’t shared, we show what’s in season using the approximate city our host derives from your connection; it isn’t stored. Nothing is used to build a profile of you. Basis: consent (your browser’s location prompt).
What we do not collect
No Google Analytics, advertising pixels or analytics cookies
No advertising identifiers or behavioural profiling
No fingerprinting
No data sold to anyone, for any reason, ever
Third-party services
These providers handle data on our behalf, each only for the function listed:
Anthropic — the AI model behind formula composition, personal readings and MYCO. anthropic.com/legal/privacy
Map & nature data for the Foraging Map — Esri and CARTO (map tiles, loaded by your browser, so they see your IP address), BigDataCloud (place name from rounded coordinates), Open-Meteo (weather), iNaturalist and GBIF (public species observations). No names or contact details are sent to them.
Instagram (Meta) — posts embedded on the homepage are loaded from Instagram, which receives your IP address and may set its own cookies. Instagram privacy policy
Fonts & code libraries — Google Fonts, Fontshare and unpkg deliver typefaces and code to your browser and see your IP address; CoinGecko provides crypto price rates when a price is shown in crypto.
Some of these providers are based outside the EU/EEA (mainly in the United States). Where that is the case, transfers rely on the provider’s safeguards, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
Cookies & local storage
We use the bare minimum, and nothing for marketing or analytics:
fa_cart_v1 — your shopping cart (browser only)
fungai_cookie_ack — remembers your choice on the cookie notice (browser only)
Formula quiz progress — lets you pick up the quiz where you left off; cleared when you refresh the start screen or finish (browser only)
Foraging Map & community settings — your map acknowledgement and, if you’re a member, your sign-in session
Stripe cookies — only set when you check out, for fraud prevention
Instagram cookies — may be set by the embedded posts on the homepage (see above)
Clearing your browser data removes everything stored in your browser.
Your rights (GDPR)
If you're in the EU/UK (and we extend these rights to everyone), you can:
Access — request a copy of any data we hold about you
Correct — ask us to fix anything inaccurate
Delete — request deletion of your data ("right to be forgotten")
Portability — receive your data in machine-readable form
Object — stop us using your data for any specific purpose
Withdraw consent — for your formula answers, the newsletter or location, anytime, without affecting what happened before
To exercise any of these, email robin@fungai.art. We'll respond within 30 days — usually within 48 hours. It's free.
Getting a copy of your data
Email us from the address you used on the site, and say what you want a copy of (or say "everything"). If we can't tell from the email alone that the request is yours, we'll ask one question to confirm it — we won't ask for ID documents. You'll get a machine-readable file (JSON, plus CSV for orders) covering your community profile and content, formula readings and reservations, orders, newsletter status and any enquiry emails.
Deleting your data
Email us and say what you want removed. We will delete your community profile and everything you posted, your formula readings and reservations, your newsletter subscription, your uploaded picture, and our email correspondence with you.
Two things we cannot delete on request, and why:
Completed orders — Swedish accounting law requires us to keep the invoice record for seven years. We can remove everything not required by that law, and the record is then deleted automatically.
Payment records held by Stripe — Stripe keeps its own records as the payment processor, under its own legal duties.
Deletion happens within 30 days. Encrypted database backups roll over within about a week after that, which is when the last copies disappear.
Data retention
Order records — kept for 7 years (Swedish accounting law), then deleted
Formula quiz answers and reservations — kept while we prepare and follow up on your formula; deleted on request at any time
Enquiry and contact emails — kept as long as the conversation is useful, then deleted
Community account and content — until you delete your account or ask us to
Newsletter email — until you unsubscribe
Local browser data — until you clear it
MYCO conversations — not stored at all (see below)
Encrypted database backups — roll over on about a seven-day cycle, so deleted data can persist in a backup for up to a week longer
MYCO, our AI assistant
MYCO answers questions on the site. Here is exactly what happens when you talk to it.
What it stores: nothing. Your conversation lives in your browser for as long as the panel is open and is never written to our database. Close it, and it's gone.
Where your message goes. It is sent to Anthropic, which runs the language model on our behalf as our processor. Under our agreement with them, your messages are not used to train their models. They keep them only briefly for abuse monitoring.
What MYCO knows. It answers from our own knowledge base — our herb database, plant monographs and our house protocols — and tells you which sources it used. It has no access to our member database, your account, your orders or your formula.
Does talking to MYCO improve it? Not automatically, and not today. Nothing you type is fed back into it. If we ever start keeping conversations to improve MYCO's answers, we will say so here first, explain the choice, and ask before using anything of yours.
What it will not do. MYCO does not diagnose, prescribe, or advise on medical conditions or medication — it refuses those questions.
Please don't type anything into MYCO you'd mind us seeing in a support conversation — treat it like an email, not a diary.
Security
The site is served over HTTPS only. Payments are processed by Stripe (PCI-DSS Level 1); we never store card data. Our database uses access rules so each part of the site can only read or write what it needs, and only administrators can see community member emails. Data is encrypted in transit and at rest, backups are encrypted, and sign-in uses a one-time email link — we never hold a password of yours, because we never ask for one.
If something goes wrong
If personal data is ever exposed, lost or accessed by someone who shouldn't have it, we will:
Contain it, work out exactly what was affected, and write down what happened.
Report it to the Swedish data protection authority (IMY) within 72 hours of becoming aware, unless it's clear there's no risk to anyone.
Tell you directly, without delay, if the breach is likely to put you at real risk — in plain words: what happened, what it means for you, and what we're doing about it.
Keep a record of every incident, including the ones we don't have to report.
If you think you've found a security problem on this site, please email robin@fungai.art — we'd genuinely rather hear it from you than find out later.
Children
The site is intended for adults. Find Your Formula offers an “Under 18” answer so that younger visitors only ever receive a gentle, non-psychoactive formula that Robin reviews personally before anything is prepared; please complete the quiz together with a parent or guardian if you are under 18. Some herbs documented in our materia medica are restricted to adults.
Changes to this policy
If we ever change this policy, the "Last updated" date at the top will change and a notice will appear on the homepage. Material changes will be announced via the newsletter.