Legal · Natali Kornata
Privacy Policy
What data we collect
We collect only what's needed to run the site and, with your consent, to see how it's used:
- Analytics (page views, interactions), only if you consent.
- A session token when you open a private gallery via a magic link.
- Your language and theme preferences (first-party cookies).
- Name and email you give when collecting or downloading photos from a private gallery.
- A download count when you use the full-resolution download on a public gallery (if enabled), with no personal identifier attached.
- Details you submit in a services inquiry (name, email, optional phone or WhatsApp, message), used only to reply. It does not create a booking.
- A review you choose to leave on a gallery (a star rating, optional text, and the name you type), used as feedback for the photographer and not shown to other visitors.
Analytics & consent
Analytics is off by default and runs only if you click Accept on the consent banner.
When on, each page view records the page, an approximate location (country, region, city, derived on our server, never your IP), your device, browser, screen size, referrer, language and time zone, tied only to a random ID, never your name or email. Deleted after 24 months.
Decline, or close the banner, and nothing is stored or collected.
Change your choice anytime via Cookie settings in the footer. We remember it for up to 12 months, then ask again.
Private gallery access (strictly necessary)
Opening a private gallery via a magic link sets a strictly-necessary session cookie so the gallery works. It expires after 30 days or when you close your browser, and is never used for ads or analytics.
Cookies and local storage
Everything this site stores in your browser, and whether it needs consent:
| Name | Purpose | Duration | Category |
|---|---|---|---|
locale-override | Remembers your language. | 1 year | Functional (no consent required) |
consent | Records your analytics choice. Needed for the consent gate, not an analytics cookie. | 12 months | Strictly necessary |
| A random analytics ID (no personal data) plus a per-session marker, set only after you consent and removed if you withdraw. | Until you withdraw consent | Analytics (consent required) | |
__session | Authenticates your private gallery session. httpOnly, strictly necessary. | 30 days | Strictly necessary |
Data retention & your rights
We keep personal data only as long as needed:
- Analytics events (views, downloads, shares): up to 24 months, then anonymised or deleted.
- Magic-link session tokens: 30 days.
- Admin sessions: 12 hours.
- Aggregated zoom-attention data (no identifiers): kept indefinitely.
- Deleting a gallery or visitor deletes all its events.
- Services inquiries (name, email, phone, message): 24 months, then deleted.
- Gallery reviews (rating, text, name): 24 months, then deleted.
You can ask us to access, correct, or erase your personal data. Contact us below.
Third-party processors
We share limited data with:
- Anthropic (US), translates and refines site text written by us: the About page, gallery titles and descriptions, service and FAQ copy, interface strings, and SEO metadata. Only our own text is sent, never visitor data and never your photos.
- Resend (US), sends our emails (magic-link invites, admin password reset, inquiry notifications and confirmations). Inquiry emails include what you submitted; others carry only an email address.
- Google Drive (Google, US), stores our offsite backups when the site owner has switched them on. A backup copies the database and the media files, so it can include the personal data described above. Backups are encrypted in transit and kept for a limited retention window.
Contact & erasure requests
For privacy questions or to access, correct, or erase your data, email us at ceo@wolfsteno.com.
We handle erasure requests within 30 days, removing all linked event and session records.