Privacy

This site shares photos from a shoot with the people in them and the people they are for. This page says what it keeps, where, and for how long.

Who is responsible

{{OWNER_LEGAL_NAME}} runs this site and decides what happens to the data on it. For questions, or to see, correct or delete your data, write to {{CONTACT_EMAIL}}.

What is stored

• Photos. Photos are resized in the uploader's browser and stored as AVIF and JPEG copies that carry no embedded metadata. Camera RAW files are also kept exactly as uploaded, so they hold whatever the camera recorded, which can include location.
• Photo details. Capture time, camera, lens, exposure settings, keywords and rating, read from each file at upload. Location (GPS) is never read. Also the title, description and crop the owner sets, a tiny blurred preview, and the position of a face in the frame, used to keep heads in view when a photo is cropped. Faces are found in the uploader's browser; only that position is stored.
• People with access. The email address of each person the owner gives access to, and what they may do in each gallery. When you sign in: your email address, one-time sign-in codes, your session, and for passkeys the public key and device name (the private key never leaves your device).
• Share links. The name the owner gives each link, often the name of the person it is for, and what it allows.
• Picks. The photos you mark as favorites when you have a share link or an account, so the owner can see your selection.

Where it is stored

With Cloudflare: the database (D1) and the photo storage (R2) are in Cloudflare's Western Europe region. Cloudflare keeps cached copies of images in its data centres worldwide so they load quickly, and handles connection data such as your IP address to deliver and protect the site. Each request is logged in Cloudflare Workers Logs with its address, status and timing, plus the request details Cloudflare records, which can include your IP address; email addresses in these logs are masked, and Cloudflare keeps them for at most 7 days. To stop abuse, sign-in attempts, share-key entry and uploads are counted per IP address or email address for one minute. The sign-in page uses Cloudflare Turnstile to check that a person, not a bot, is signing in. Sign-in codes are sent by email through Cloudflare Email Sending.

Cookies and browser storage

• valentina_session keeps you signed in for 30 days. It is set only when you sign in.
• turnstile_pass remembers for 10 minutes that you passed the bot check on the sign-in page.
• gk_… remembers a share link's key for that gallery for 90 days, so the link keeps working without the key in the address.
• Your browser's local storage keeps your light or dark choice and your favorites.

There are no analytics, advertising or tracking cookies.

We use Traks, hosted in our own Cloudflare account, to count visits and page views without cookies.

How long it is kept

New galleries are deleted automatically 45 days after they are created, unless the owner extends them or keeps them permanently. Until then the originals are kept. Deleting a gallery removes its photos, including RAW files, their details, its share links and its picks. Sign-in codes expire after 30 minutes and sessions after 30 days. Email addresses stay until the owner removes them.

Your rights

You can ask to see, correct or delete your data, or object to its use, by writing to {{CONTACT_EMAIL}}. If you are in the EU, you can also complain to your data protection authority.