bikko.studio was built from day one to reject vulnerable password databases. When you authenticate using Touch ID, Face ID, Windows Hello, or a YubiKey, your biometric information is processed exclusively within your device’s hardware Secure Enclave or Trusted Execution Environment.

Our servers receive only a public asymmetric cryptographic signature confirming authenticator ownership. We never see, collect, or store your biometric scans.

We believe in respectful digital environments. studioNeo does not utilize third-party behavioral trackers, cross-site marketing beacons, or invasive tracking scripts.

• Saved Collections & Favorites: Your curated gallery saves, heart favorites, and display preferences are stored locally on your device in standard localStorage, giving you full control to clear your collection at any moment.
• Session Tokens: Active subscriber sessions use encrypted, HTTP-only, SameSite=Strict cookies solely for verifying membership and download entitlement.

When subscribing to archive tiers or registering a collector profile, we collect only the minimal data points essential to fulfill digital asset delivery:

• Verified Email Address: Used for transactional notifications, billing receipts, and account recovery challenges.
• Passkey Public Credentials: Cryptographic public keys and credential IDs to identify authorized hardware authenticators.
• Linked Providers (Optional): If you choose to link Google or Microsoft identities, we store only the provider account identifier to facilitate passwordless OAuth federation.

Regardless of your jurisdiction, you enjoy uninhibited rights over your digital presence in our atelier:

• Right to Erasure (Forget Me): You can delete your subscriber profile and detach all registered passkeys instantly through your Dashboard or by submitting a curatorial request.
• Right to Export: You can download a complete JSON manifest of your account records, linked credentials, and acquired cel hashes at any time.
• No Data Brokerage: We never sell, rent, or monetize collector or subscriber information to external brokers or advertising networks.

For privacy disclosures, vulnerability reports, or data deletion confirmations, reach our security desk directly at contact@bikko.studio.