Skip to content
Elypson

Privacy

This text is a starting point, not legal drafting. It must be reviewed by a lawyer before going live.

What is collected

Your email address, to sign you in and write to you about your session. Whatever you write in a booking request or a message. The photographs from your session.

No passwords

This site stores none. Sign-in uses a six-digit code sent by e-mail, or a passkey whose secret never leaves your device.

Your photographs

The photographs from your session are private. Only you and the photographer can see them, and they are never published without your consent.

Audience measurement

Traffic is measured without cookies and without any identifier that would follow you from one visit to the next. No IP address is kept in the clear, and nothing is sent outside the European Union.

Your rights

From “My account” you can download all of your data as a file at any time, and close your account yourself. Closing an account erases your identity, your e-mail address and your sign-in methods, and closes every session; agreed bookings and delivered galleries are kept without your name, because they record what was ordered and delivered. For deletion of the photographs themselves, write from your account address: the request is handled within one month.

What is deleted, and when

Nothing is destroyed immediately: a removed photograph spends thirty days in the trash, so a mistake can be undone — a session cannot be reshot. After that it is permanently destroyed, unless it still belongs to a gallery delivered to you: while that link exists, you must be able to download it again. Detailed traffic measurements are erased after ninety days; only anonymous totals are kept.

Retention periods

Exact periods are still being set and will be stated here before the site opens. Documents the law requires to be kept are retained regardless of a deletion request.