Privacy

Who is responsible

Muhju, Switzerland, is responsible for the processing described on this page. For anything on this page, write to contact@muhju.art.

When you visit

The site runs on Cloudflare (Cloudflare, Inc., based in the USA), with servers around the world. When you open a page, your browser sends your IP address, the page address, the time and your browser’s request headers, such as its type and language. Cloudflare processes this data to deliver the site and protect it from attacks. Cloudflare may process this data outside Switzerland, including in the USA.

Requests that reach the site’s own code are written to Cloudflare’s request logs. These logs are kept for up to seven days and used only to find faults. When a page fails to load, your browser may also send Cloudflare a short error report.

The site uses no advertising, tracking pixels, third-party scripts or embedded social media; its own visitor statistics are described below, and fonts, pictures and music are served from the site itself. A private preview, open only to people Muhju invites, runs on Vercel (Vercel Inc., USA), which keeps its own technical logs.

Security settings tell your browser to use HTTPS and block scripts from other sites; these settings store nothing about you.

Visitor statistics

Insights is the site’s own visitor statistics. It helps Muhju see which artworks are looked at, which pages are visited and for how long, what is clicked, which songs are played, how many visitors reach the Guild or ask for a guest pass, and where visitors come from. Muhju uses it to improve the site and the exhibition of the works. Only Muhju sees the statistics. No third party receives the statistics, and no profiles are shared with anyone. The statistics use no cookies.

A small script records the pages you open, how long you are active, how far you scroll and which parts of a page are on screen. It records artworks shown on screen or opened, zoomed or asked about; clicks and taps, with the button or link label and its place on the page; music played and for how long; and words entered in the artwork search. It also records turning the Guild coin, whether a password was accepted, pressing “Request a guest pass”, pages not found, page loading times and script errors. With each visit, the server adds the country, region, city and network name that Cloudflare derives from your IP address; your browser, system and device type; the site you came from; your browser’s languages; screen and window size; light or dark setting; and local time of day.

Insights never records anything else you type, passwords or the text of board notes. Your IP address itself is never stored.

Visitors in the EU, EEA and UK are asked once at the foot of the page whether the site may remember their visits. The answer is kept in the browser. Until you answer, or if you say no, visits are counted without being linked across days. The server makes a code from your IP address and browser using a secret that changes daily and is deleted after two days. This prevents recognition on another day. Other visitors are remembered automatically. Browser storage called muhju-visitor holds a random identifier sent with the statistics, allowing return visits, the first visit date and the number of visits to be recognised. Anyone can choose “Don’t remember me” below to delete the identifier and keep only a refusal, or clear the browser’s storage. Browsers sending Global Privacy Control are never remembered.

Records are stored in Cloudflare D1 in Cloudflare’s Western Europe region. Cloudflare, Inc., USA, may process data outside Switzerland. Detailed records are deleted after 180 days, or sooner if the database fills. Daily totals without visitor identifiers are kept without limit. Muhju also keeps a copy of the records on Muhju’s own computer and analyses them partly with Claude, an AI assistant by Anthropic.

Muhju, Switzerland, is responsible for this data. The statistics serve Muhju’s legitimate interest in understanding how the site is used. Remembering visitors in the EU, EEA and UK is based on consent, which you can withdraw on this page. Under Swiss data protection law and, where applicable, the GDPR, you can request access, correction or deletion, or object to processing, by writing to contact@muhju.art. In the EU, you can complain to a supervisory authority. In Switzerland, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

The control below shows whether this browser is remembered and lets you change it.

Cookies

The site sets one cookie, named guild, only after you enter the Guild password. It is necessary for the hall to recognise your visit as a member or guest session. Page scripts cannot read it because it is HttpOnly.

The cookie holds whether you entered as a member or a guest, when you entered, and a random number unique to the session. The server signs it. It holds nothing about who you are. It lasts 30 days, or until you choose “Leave the Hall”. There are no other cookies.

When you choose “Leave the Hall”, the server records that the session has ended. This prevents a copy of the cookie from opening the hall again. The record contains only the cookie’s signature, a random code, and nothing about you. It is kept in the server’s memory and, on the live site, in Cloudflare Workers KV storage. It is deleted when the cookie would have expired, after at most 30 days.

Your browser’s storage

The site keeps a few settings in your browser’s own storage. These settings never leave your browser and are not sent to the server. You can delete them at any time in your browser’s settings.

These are your light or dark theme (muhju-theme), the music mood you last picked with the harp button on the public site or in the Guild hall (muhju-music-mood:site), remembered for the next time you turn music on with the harp button on the public site and played from its opening song when you enter the Guild hall, and the cover picture each year or series last showed on the artworks page so your next visit shows a different one (muhju-index-covers).

For the current tab only, muhju-entered records that you have passed the entry screen, while muhju-way-back remembers the site’s page addresses, scroll positions, hero slide and any open picture or Herald article when you follow the site’s links, so the booklet’s return link and your browser’s Back button can return you to the same place. These records contain no information about who you are, never leave your browser, are not sent to the server and are cleared when the tab closes.

If you pin a note on the board, your browser stores a key under muhju-board-pin that lets you change or delete your note during the first week, after which it no longer works; the key is sent to the server only when you open, change or delete your note.

Browser storage called muhju-visitor holds a random identifier and the date of your first visit, or only a refusal, and is sent with the statistics; you can delete it by clearing your browser’s storage.

The Guild

The Guild password is checked on the server and never stored. There are no user accounts.

To protect the Guild’s hall from password guessing, Cloudflare counts password attempts per IP address at its edge. It allows at most five attempts a minute from one address and keeps the count for one minute.

The site’s server also counts wrong passwords per IP address in working memory only, never on disk. After five wrong attempts, that address must wait one minute. The wait grows with further wrong attempts, up to one day. The count is forgotten after one day or immediately after a correct password. The same limits apply to wrong keys at Muhju’s own admin desks.

The Guild’s hall shows its members’ names, public X handles and pictures, ENS names, and the works by Muhju they hold. These details come from Muhju’s own list of members and records of commissions and direct sales, public blockchain records and public profiles. Only Guild members see them. Guests and other visitors do not. If you are a member and want an entry changed or removed, write to Muhju.

Guild members and guests can pin a note on the board only while it is open for notes. Every note waits for Muhju’s approval before it appears. Muhju may correct or shorten a note. To allow one note per week, the site keeps a salted hash of your IP address, or of its network part for an IPv6 address, for seven days, never the address itself. The hash is then deleted.

With each note, the site keeps its text, any signature you add, the kind of note you chose, whether a member or a guest pinned it, and when it was pinned and changed. An approved note is shown to everyone in the hall, members and guests, marked “Pinned by Guilder” or “Pinned by guest” with its month and year. A guest’s optional X handle is shown to everyone in the hall as @handle, never linked. A member’s name or handle is shown only to members.

A note is kept until Muhju deletes it, even if it was declined. Write to Muhju to have your note deleted.

During that first week, you can change your note, and the changed note waits for Muhju’s approval again.

Writing to Muhju

Email links open your own mail program. The site itself stores nothing. Your message reaches Muhju’s mailbox at Google (Gmail). Muhju uses your message only to answer you and keeps it as long as the conversation needs.

The market and links

The site’s server fetches prices, sales and auctions from public marketplaces: raster.art, Transient, SuperRare, The Memes by 6529 and ninfa.io. OpenSea’s listings and sales reach the market through raster.art. The server also fetches Obscuria’s works, collector counts and last sales from networked.art’s public API. The server also fetches daily ETH to US dollar exchange rates from Coinbase, or from Bitstamp when Coinbase does not answer. Nothing about you is sent to these marketplaces, networked.art, Coinbase or Bitstamp.

Links to other sites, such as marketplaces, galleries, the press, video sites, Instagram and X, lead to sites with their own privacy rules. At build time, all Ethereum wallets in the market’s “Top Collectors” section are named by their owners’ X display names where publicly linked through ENS, Transient, SuperRare, OpenSea, 6529.io or verified Farcaster accounts, found through web3.bio and checked with Farcaster’s public API. Otherwise, Muhju’s AI assistant (GPT) searched public pages once for wallets among the first 120 without a linked X account; its suggestions are used only where, at each build, the X profile names the wallet or its ENS name, the X profile’s website link points to the wallet’s own OpenSea or raster.art profile, or the wallet’s own OpenSea or 6529.io profile links the account. Names otherwise remain verified ENS or .tez names (from the Ethereum Name Service and Tezos Domains, read at build time), or shortened addresses; pictures come from the linked X account, otherwise the wallet’s public OpenSea profile, with a plain gold disc as the fallback, and all X names and X pictures are read through api.fxtwitter.com at build time, with pictures copied and served from this site. Each wallet links only to its public blockchain explorer page (Etherscan, or TzKT for Tezos), also an external site with its own privacy rules, never to X.

Newsletter

There is no newsletter sign-up on the site at the moment. If one is added, this page will explain what is kept, for how long and how to leave.

Why data is processed

Data is processed to deliver the site and keep it safe and working, to let Guild members and guests into the hall, to run the board and to answer your messages.

Where the GDPR applies, processing relies on Muhju’s legitimate interests in running and protecting the site, providing the hall and board, and answering messages you send (Article 6(1)(f)). This includes handling your requests to enter the hall, pin or edit a note, or contact Muhju.

Your rights

Under the revised Swiss Federal Act on Data Protection (FADP) and, where it applies, the GDPR, you can ask what personal data is processed about you and request correction or deletion. Subject to the conditions of the applicable law, you can object to processing, request restrictions and ask for your data in a portable form. Write to contact@muhju.art.

You may also complain to a data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU, you can contact the authority where you live.

Changes

This page is updated whenever the site changes what it does.