Privacy
How I handle
your data
This page says, without circling around it, what I collect, why, who I entrust it to, and how you can make it disappear. If a question is left over after reading it, write to me: I answer myself.
Who I am
Tessera Mundi is a project by Leonardo Pecoraro, mosaic artist, Mendrisio, Switzerland. I am the person responsible for the data this site collects: there is no office behind me.
lpecoraro@ticino.com · +41 79 681 30 62
What I collect, and when
If you write to me from the site. Your name, your email and whatever you write in the message. I need them to answer you, and for nothing else.
If you take a tessera into your keeping. The payment happens on Stripe, not here: your name, shipping address and email are collected by Stripe and I read them from my dashboard. Your card never passes through me and I never see it.
If you tell your story to the Atlas. Name, email, city or village, title of the tessera, and the photograph and words you send me. These are the only case in which some details become public: I say so plainly in the form, and it only happens if you tick that box.
If you order with an invoice. Name, email and full postal address. I need the address to ship and to make out the invoice; it comes straight to me and passes through nobody else. I keep it for as long as Swiss accounting law requires — ten years for invoices, which is not up to me.
If you sign up to the list. Your first name and your email address, nothing else. The name is only so I can greet you when I write. The address I use to tell you about new tesserae, and for no other purpose. I do not pass it on, I do not sell it, I do not add it to any shared list. To unsubscribe, reply to any of my emails: I remove the address the same day and keep no copy.
What appears on the Atlas, and what does not
The Atlas shows the city or village, the first name, the photograph and your words. The address never appears: the points on the map sit on the centre of the place, not on your home. If you would rather stay anonymous, or use only an initial, just tell me.
And this always holds: you can ask to be removed at any time, without explaining why. One line to lpecoraro@ticino.com and the point disappears from the map.
Who I entrust the data to
- Hostinger — hosts the site and the mailbox. Servers in the European Union.
- Stripe — handles payments. An Irish company of the US group Stripe Inc.: some data may be processed in the United States, under the contractual safeguards the law requires.
- Swiss Post or the courier — receives your name and address, because the parcel has to reach you.
Nobody else. I do not sell addresses, I do not trade them, I do not lend them. There is no marketing list.
Cookies and tracking
This site uses no profiling cookies, has no Google Analytics and no advertising pixels. Nobody follows you from page to page. That is why you will not find the usual banner to dismiss.
Two things, for completeness. The typefaces are hosted on my own server, not on Google's: nobody is told that you are reading this page. And where there is a map — at the foot of the home page and on the Atlas — the map tiles come from OpenStreetMap: to load them, your IP address reaches their servers, as happens with any map on any site. It is the only connection to the outside left in the whole site.
How long I keep it
Messages stay in my mailbox as long as the conversation makes sense. Shipping details I keep for as long as Swiss accounting rules require — ten years for invoices, which is not up to me. The Atlas stories stay for as long as you want them to.
Your rights
You can ask me what data I hold about you, have it corrected, have it deleted, or object to its use. Write to lpecoraro@ticino.com: I answer myself, usually within a couple of days.
If you live in the European Union, the GDPR rights apply too, including the right to complain to your country's authority. If you live in Switzerland, the authority is the Federal Data Protection and Information Commissioner, in Bern.
The law that applies
The Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023), and the European GDPR for anyone living in the European Union, since I ship there too.
Last updated: September 2026. If I change the way I handle data, I change this page too.