Privacy
This text is a starting point, not legal drafting. It must be reviewed by a lawyer before going live.
What is collected
Your email address, to sign you in and write to you about your session. Whatever you write in a booking request or a message. The photographs from your session.
No passwords
This site stores none. Sign-in uses a six-digit code sent by e-mail, or a passkey whose secret never leaves your device.
Your photographs
The photographs from your session are private. Only you and the photographer can see them, and they are never published without your consent.
Audience measurement
Traffic is measured without cookies and without any identifier that would follow you from one visit to the next. No IP address is kept in the clear, and nothing is sent outside the European Union.
Your rights
From “My account” you can download all of your data as a file at any time, and close your account yourself. Closing an account erases your identity, your e-mail address and your sign-in methods, and closes every session; agreed bookings and delivered galleries are kept without your name, because they record what was ordered and delivered. For deletion of the photographs themselves, write from your account address: the request is handled within one month.
What is deleted, and when
Nothing is destroyed immediately: a removed photograph spends thirty days in the trash, so a mistake can be undone — a session cannot be reshot. After that it is permanently destroyed, unless it still belongs to a gallery delivered to you: while that link exists, you must be able to download it again. Detailed traffic measurements are erased after ninety days; only anonymous totals are kept.
Retention periods
Exact periods are still being set and will be stated here before the site opens. Documents the law requires to be kept are retained regardless of a deletion request.