Privacy policy

Last updated: 13 October 2026

This policy explains what happens to your information when you visit Tapestry Rosi or send Rosi a message. The site collects very little. There is no shop, no advertising and no analytics or tracking tools.

Who is responsible

The website is run by Rosi, who lives in Bulgaria and stitches the tapestries shown here by hand. She is responsible for the personal information described in this policy. You can contact her about privacy, or anything else, through the contact form.

When you send a message

The contact form asks for your name, your email address, a subject and your message. When you send it, the website emails these details to Rosi so that she can read your message and reply. The website does not keep its own copy of your message.

If you tick "Send a copy to yourself", the same message is also sent to the email address you entered.

Rosi uses these details only to answer you and to deal with any follow-up you ask for. They are not sold, used for marketing or added to a mailing list. Messages are kept only as long as they are needed for that conversation and are then deleted. Please leave out sensitive information, or details about other people, that your question does not need.

The legal basis is Rosi's legitimate interest in answering the messages people send her. If your message is about buying a tapestry, it is also the steps you ask her to take before any agreement is made.

Visiting the website

When your browser asks for a page, it sends the technical information that every website receives, such as your IP address, the address of the page, the time of the request and the type of browser and device. The server needs this to deliver the page. Like most web servers, it may also record requests in log files, which are used to keep the site running and secure, not to identify visitors.

If you use the search box, your search words are sent to the website so that it can find matching pages. They are not saved for statistics.

Cookies and browser storage

The website sets one cookie. It is a session cookie that keeps your visit working, for example by protecting the contact form against misuse and remembering the language you chose. It holds a random identifier rather than personal details, and your browser deletes it when you close it.

The site's template also saves two small items in your browser's local storage: the address of the last page you opened and, on some page layouts, how far down you had scrolled. They let a page return to the same position when you reload it. This information stays on your device, is not sent to the website and remains until you clear your browser's stored data.

The site uses no advertising, analytics or tracking cookies. You can delete cookies and stored data at any time in your browser settings. If you block the session cookie, the contact form may not work.

Fonts from Google

To display its lettering, the website loads font files from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser fetches them directly from Google's servers, so Google receives your IP address and basic technical information about the request, and may process it outside the European Union. This relies on Rosi's legitimate interest in showing the website with clear, consistent lettering. Google's Privacy Policy explains how Google handles this information.

Share buttons

The tapestry pages have buttons for sharing on Facebook, X (Twitter) and LinkedIn. While you read a page, the buttons load nothing from those services and send them nothing. When you click one, the website adds one to an anonymous counter for that page and service, then opens the service's own sharing page in a new window. From there, that service's privacy policy applies.

Who receives your information

Your information is handled only as described above. The companies that host the website and deliver its email process it on Rosi's behalf, and Google receives the font requests your browser sends. Your information is not sold or shared with anyone else unless the law requires it.

Your rights

Under the GDPR, you can ask Rosi for a copy of the personal information she holds about you, and ask her to correct or delete it. Where these rights apply, you can also ask her to restrict its use, object to it or give you your data in a portable format. To make a request, use the contact form.

If you think your information has been mishandled, you can complain to a data protection authority. In Bulgaria, this is the Commission for Personal Data Protection. You can also contact the authority in the country where you live or work. The European Commission explains these rights in more detail.

Changes to this policy

If the website starts handling information in a new way, this policy will be updated and the date at the top will change. Questions about it are always welcome through the contact form.