Privacy & cookies
Last updated October 6, 2026
This notice covers mcpgallery.art, run by MCP Art Gallery, Dallas, Texas, USA. Our online shop at shopify.mcpgallery.art is run on Shopify and has its own privacy policy and cookie settings.
The short version
- We don't use advertising, tracking or analytics cookies, and we don't load any third-party trackers, fonts or scripts.
- We count visits on our own server without cookies and without storing anything on your device. We don't build profiles or follow you across sites.
- The only cookies we set are needed to keep you signed in to things you asked to sign in to, so there's no cookie banner.
Cookies
| Name | What it's for | How long |
|---|---|---|
mcp_gallery_session | Keeps you signed in after you enter an email code to view a private collection. Only set if you do that. | 30 days, or until you sign out |
mcp_manage_session, mcp_manage_login | Sign-in for gallery staff in the event manager. Never set for visitors. | 7 days / 15 minutes |
These are strictly necessary for a service you've asked for, so they don't need consent under EU and UK rules. Your browser can delete or block them at any time; you'll just need to sign in again.
Visit statistics
To see which pages are visited and which links and QR codes are used, our web server counts requests. For each page view,
link click or QR scan we keep: the date and time, the page or link, the site that referred you (just its name), any campaign
tags in the link (utm_source and similar), your country, and your device type, browser and operating system.
To count unique visitors per day without cookies, we combine your IP address and browser details with a random value that is replaced every day and then deleted, and store only a short scrambled result. After the day is over it can't be linked back to you or to your other visits. If your browser sends a Global Privacy Control or Do Not Track signal, we count the page view but don't create this key.
Your country is looked up from your IP address on our own server using the DB-IP database; nothing is sent to DB-IP. Raw server logs that include IP addresses are deleted within two days. Search engine bots and other automated traffic are filtered out.
We rely on our legitimate interest in running and improving the website (GDPR Art. 6(1)(f)). You can object at any time using the contact below, or simply turn on Global Privacy Control in your browser.
Other information we handle
- Email sign-in codes. If you request access to a private collection, we use your email address to check you're on the invitation list and email you a code. Codes expire after 15 minutes.
- Event tickets. Ticket purchases are handled by Shopify. When your ticket is scanned at the door we look up the order in Shopify and record that it was checked in, so a ticket can't be used twice.
- Links to other sites. Links to our shop, Instagram, TikTok and ticket pages pass through a short redirect on our site so we can count clicks. Once you arrive, that site's own privacy policy applies.
Your rights
Depending on where you live (including the EU, EEA, UK and some US states), you can ask us for a copy of personal data we hold about you, or ask us to correct or delete it, or to stop using it. You can also complain to your local data protection authority. Because our visit statistics don't identify anyone, in most cases there won't be anything we can tie back to you.
Contact
Email privacy@mcpgallery.art with any privacy question or request.
← Back to MCP Art Gallery