Cookies and local storage
Necessary storage operates the service. Use cookie settings to allow or reject analytics and external services. Google advertising uses separate provider privacy controls where available.
| Name | Purpose | Duration | Category |
|---|---|---|---|
| bernado-myrtil-portfolio-session / XSRF-TOKEN | Protects forms, sign-in, cart, private access, and the current session. | Session or configured lifetime | Necessary |
| portfolio_locale | Remembers your selected language. | Up to 1 year | Necessary |
| portfolio_consent | Remembers your privacy choices. | Up to 6 months | Necessary |
| portfolio_visitor | Creates the pseudonymous visitor hash used for first-party analytics. | Up to 2 years | Analytics |
| affiliate_ref / affiliate_context | Attributes an eligible store referral to an approved affiliate. | Store-configured referral period | Referral attribution |
| affiliate_visitor | Creates the pseudonymous visitor hash used for first-party analytics. | Up to 90 days | Analytics |
Who operates this service
Bernado Myrtil, based in Les Cayes, Haiti, operates bernadomyrtil.com, its connected subdomains, and myrtil.store. For legal questions or privacy requests, contact contact@bernadomyrtil.com.
Information you provide
Project inquiries may include your name, email, phone, company, location, project details, budget, timeline, decision role, referral source, and message.
When you sign in with Google, the site receives the verified Google identifier and profile information needed to create or link your account, such as your name, email, and profile image. The site never receives your Google password.
Comments include your account identity and submitted text. Store orders may include your name, email, country, products, prices, coupon, payment method and status, payment reference, download activity, personalization details, and any payment receipt you upload. Affiliate applications include the promotion details you submit.
Information collected through use
When analytics is enabled, first-party measurement stores the page, route, language, referrer host, device category, time, and a pseudonymous visitor hash. Article engagement may also record reading progress. It does not store the full referrer URL or raw IP address in the page-view record.
Security systems may process IP address, user agent, attempted identifier, approximate country or city supplied by a trusted hosting provider, request details, and account activity to prevent abuse and investigate incidents.
When a protected client prototype is opened, an owner notification may contain the access time, IP address, approximate location supplied by the hosting provider, device and browser details, preferred language, referrer, and user agent. Prototype sessions expire and the packages are not publicly indexed.
Why information is used
Information is used to answer inquiries, operate accounts and comments, process and verify orders and payments, deliver downloads and personalized files, administer affiliates, provide protected prototypes, send operational messages, measure the audience when permitted, secure the service, prevent fraud, keep business records, and comply with legal obligations.
Depending on the context and applicable law, processing is based on your consent, steps requested before a contract, performance of a contract, legitimate interests in operating and protecting the service, or legal obligations.
Service providers and disclosures
Information may be processed by hosting and private object-storage providers, email delivery providers, Google for sign-in, Analytics and AdSense, and the payment method you select, which may include Stripe, Google Pay through Stripe, PayPal, MonCash, or an approved off-platform method.
Pending comment text, the article title, and parent-comment context may be sent to the configured OpenAI or Google Gemini API for automated moderation. The moderation request excludes your email address and IP address. Uncertain or failed results remain available for human review.
Information may also be disclosed to professional advisers, fraud-prevention partners, or public authorities when reasonably necessary to protect rights, investigate abuse, enforce agreements, or comply with law. Personal information is not sold by this service.
International processing
Providers and visitors may be located in different countries. Information may therefore be processed outside your country, where privacy rules may differ. Appropriate contractual, security, and provider safeguards are used where required.
Retention
Session data follows the configured session lifetime. The language cookie lasts up to one year, the consent cookie up to six months, and the pseudonymous first-party visitor cookie up to two years. An affiliate referral cookie uses the referral period displayed by the store.
First-party analytics remains until it is cleared or archived under operational controls. Inquiries, accounts, comments, prototype-access notifications, security records, orders, payment evidence, affiliate records, and support correspondence are kept only as long as needed for the service, contractual, accounting, fraud-prevention, dispute, backup, and legal purposes. Provider-controlled data follows each provider’s settings and policy. A valid deletion request is honored unless information must be retained for a legal or overriding operational reason.
Your choices and rights
You can reject or change optional cookies at any time. You can update the name on your account and remove your own comments from public view through available account controls. You may also request access, correction, a copy, restriction, objection, or deletion of personal information, subject to applicable law and identity verification.
Withdrawing consent stops future optional collection but does not invalidate earlier processing. Payment providers and Google provide separate privacy controls for information they process independently.
Security, children, and changes
The service uses access controls, encrypted transport, private storage, limited permissions, validation, monitoring, and other reasonable safeguards. No online system can guarantee absolute security.
The services are intended for people able to enter the relevant transaction or use the service lawfully and are not directed to children. A parent or guardian may contact the operator if a child submitted personal information.
This notice may be updated when the service, providers, or legal requirements change. The date above identifies the current version.
Browser preferences and protected access
Local storage remembers the selected theme and whether the cookie-settings shortcut is hidden until you clear it. Session storage remembers a dismissed cart drawer within the browser tab. Registered administrators use the necessary portfolio_admin_device cookie, lasting up to one year unless revoked; remembered sign-in may use an authentication cookie according to its configured lifetime. These controls protect access or remember interface choices rather than advertising profiles.
Fonts and interface resources
Public pages load fonts and icons from Google Fonts and jsDelivr. These requests can disclose IP address, browser details and referring-site information to those providers even when optional analytics and chat are disabled. Cookie choices do not block these interface-resource requests.
Saved addresses and physical fulfillment
Physical orders collect the recipient’s name, phone where needed, street address, city, postal code, region, country, selected variant and shipping method. Shipping details are sent to Printful to calculate rates and taxes and arrange production and delivery; carriers receive details needed to deliver the parcel.
When signed in, you can choose to save a shipping address, add or edit addresses, delete an address, and select your main address in your account. Deleting a saved address does not erase the address already recorded on an order, invoice or fulfillment record.
Payment evidence, support and recovery messages
The selected payment service receives the information needed to process and verify payment. MonCash may use MonCash Connect or Bazik according to store configuration. Manual bank transfer, Zelle, MonCash wallet and NatCash wallet options, when displayed, are verified by staff. A receipt is evidence for review, not proof that payment has settled. Do not upload passwords, wallet PINs, full card numbers or unrelated financial information.
The configured Crisp or Tawk support chat may process your conversation, browser and page context when external services are enabled. Order confirmations, payment-review updates and recovery messages may be sent to the email provided. Identified unfinished carts may be saved for recovery; the application schedules deletion after 90 days of inactivity, subject to the task actually running. Contact support to request that recovery messages stop.
Cookie choices and advertising
First-party analytics and optional external services remain disabled until you save an explicit choice. A saved rejection prevents their future loading. Google Analytics uses an explicit consent state. Cookie settings do not themselves control Google AdSense, which is loaded on configured blog and portfolio-project pages and may contact Google before an advertising choice is made.
Change your choices using the cookie controls on this page. Rejecting a previously loaded external service reloads the page to stop its active scripts. Support chat is excluded from private account, checkout and order pages and from public pages containing recognized access-token parameters. Browser and provider controls may be needed to clear existing storage. Rejecting optional services does not erase order, security or other necessary records.