Privacy Policy
Last updated: 22 October 2026
This policy explains which personal data Anatomy Drawing (https://www.anatomydrawing.com) processes, why, for how long, and what rights you have. It describes what the site actually does today. If that changes, we update this policy before the change takes effect.
1. Who is responsible
The controller for this site is CIQRA OÜ, a private limited company registered in the Estonian Commercial Register under registry code 16465907, with its registered address at Veskiposti tn 2, 10138 Tallinn, Estonia.
For any privacy question or request, write to info@ciqra.com or to the postal address above. You can also use the contact form.
No data protection officer has been appointed.
2. What this site is
Anatomy Drawing is an information site with articles and reference content. It has no user accounts, no shop and no newsletter, and nothing is sold through it. You can read every page without giving us any personal data.
3. What we process, why, and on which legal basis
3.1 Delivering the pages
To deliver a page, our hosting and network providers necessarily process your IP address and technical request data (requested address, time, browser type). We use this only to deliver the site and to protect it against attacks and abuse, not to identify you or build a profile. Hosting request logs are kept for about 30 days.
Legal basis: our legitimate interest in operating a secure website (GDPR Art. 6(1)(f)).
3.2 Visit statistics
The site counts page views with its own first-party measurement. No third-party analytics service is used.
- Without your consent, a page view is recorded without any identifier: the page address and title, the referring page, the page language, and the screen and window size.
- Only if you allow analytics in the cookie banner, a random visitor ID is also stored in your browser (localStorage) and a random session ID for the current visit (sessionStorage), so that returning visits can be counted. Events with these IDs are kept for 400 days; statistics aggregated from them for up to 1,100 days.
Your IP address and browser user-agent are not stored with these events.
Legal basis: counting without identifiers, our legitimate interest in knowing which pages are read (Art. 6(1)(f)); the IDs, your consent (Art. 6(1)(a)), which you can withdraw at any time.
3.3 Your cookie choice
When you answer the cookie banner, your choice is saved in a cookie on your device and we keep a proof record of it: a random consent ID, the categories you allowed, the policy version, the time, your browser user-agent and a salted one-way hash of your IP address (never the IP address itself). The record is kept for 365 days plus 3 years, so that we can show which consent was given.
Legal basis: our legal obligation to be able to demonstrate consent (Art. 6(1)(c) together with Art. 7(1)).
3.4 Contact form and email
If you write to us, we receive your name, email address and message, and use them only to answer you. The form has no CAPTCHA; spam is filtered with a hidden field that people do not see. We keep your message for as long as this site is operated, unless you ask us to delete it sooner.
Legal basis: our legitimate interest in answering messages (Art. 6(1)(f)), or steps you ask us to take (Art. 6(1)(b)).
3.5 What we do not do
We do not create user accounts, send newsletters, sell anything, show third-party advertising, use third-party analytics or advertising tags, sell personal data, or make decisions about you by automated means.
4. Who receives data
- Hosting: the site runs on the CIQRA platform, operated by CIQRA OÜ (Tallinn, Estonia) on Microsoft Azure data centres in Germany (Frankfurt, with a backup region in Germany).
- Network and security: Cloudflare, Inc. delivers the pages and protects the site against attacks, and in doing so processes your IP address and request data.
- Email: if we answer you by email, the reply is sent through our business email service (Microsoft 365).
- Authorities: only where the law requires it.
No one else receives your data, and we do not sell it.
5. Transfers outside the EU
The site's data is stored in the EU (Germany). Cloudflare, Inc. and Microsoft Corporation are based in the United States; where data reaches them, the transfer is covered by the European Commission's Standard Contractual Clauses.
6. How long we keep data
- Hosting request logs: about 30 days.
- Page views without identifiers: kept as aggregate statistics.
- Analytics events with visitor/session IDs (only with consent): 400 days; aggregated statistics up to 1,100 days.
- Cookie consent proof: 365 days plus 3 years.
- Contact messages: as described in 3.4.
- Backups of the platform: up to 35 days, then overwritten.
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing; for analytics, use the cookie settings button that remains on every page after you have made a choice.
Write to info@ciqra.com. We answer within one month. You also have the right to complain to a data protection authority, in particular the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the authority where you live or work.
If you are in the United States: we do not sell personal information or share it for cross-context behavioural advertising. The site honours the Global Privacy Control signal. You can send any request to info@ciqra.com.
8. Children
This site is not directed at children, and we do not knowingly collect personal data from children.
9. Security
Pages are served only over encrypted connections (HTTPS). The platform separates each site's data at database level and limits access to authorised staff.
10. Changes
We update this policy when the site changes. The date at the top shows the current version.