Legal
Cookie Policy
1. What cookies are
Cookies are small text files that a website asks your browser to store. Websites can also store information in your browser in other ways, such as “local storage”. This policy covers both on keystone.art.
2. Cookies Keystone sets
| Cookie | What it is for | How long it lasts |
|---|---|---|
ks_cap |
Set when you open a Keystone link to review a transfer or a gift (an address beginning keystone.art/r/). It keeps your place in that review, and protects its forms, so that the link’s code does not stay in your browser’s address bar. Its contents are encrypted. | Up to 30 minutes, and never longer than the link itself remains valid. It is removed when the link is no longer active. |
ks_own |
Set when you open an owner-action page (an address beginning keystone.art/o/) to give an edition you hold, or to withdraw such a gift. It keeps your place in that action and ties the confirmation code to your browser. While you are setting up a gift, it holds the recipient’s name and email address that you entered, in encrypted form. | 30 minutes. |
Both cookies are sent only to the pages they belong to (keystone.art/r/ and keystone.art/o/
respectively). They are marked HttpOnly (not readable by scripts on the page),
Secure (sent only over HTTPS) and SameSite=Lax. They are needed for
the action you started from your email, and they are not used for analytics or advertising.
Keystone sets no other cookies, and the website has no cookie banner.
3. No analytics or advertising
The Keystone website does not use analytics, advertising, social media or tracking cookies, and it does not use analytics scripts.
4. Resources from other providers
Google Fonts
Keystone’s web pages load their fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When your browser downloads the fonts, Google receives your IP address and standard information about your browser, as with any web request. Keystone does not set cookies for this. Google’s handling of that information is described in Google’s Privacy Policy.
ImageKit
Artwork images are delivered from ImageKit’s servers (ik.imagekit.io), which receive the same standard request information when your browser downloads an image.
5. An older setting you may still have
Earlier versions of the website showed a cookie banner that saved your choice in your
browser’s local storage under the name keystoneCookieConsent. If you used that
banner, the value may still be stored on your device, but Keystone no longer reads or uses
it. You can remove it by clearing the site data for keystone.art in your browser.
6. The Keystone app
The Keystone app does not use browser cookies. It keeps your sign-in session and your preferences, such as display settings, on your device.
7. Managing cookies
You can block or delete cookies in your browser’s settings. If you block ks_cap or
ks_own, the pages behind Keystone’s secure links will not work.
8. Changes and contact
We may update this policy if the way the website works changes. The date at the top shows when it was last updated. If you have a question about cookies, email privacy@ocpar.org. Our Privacy Notice explains how Keystone handles personal information.