Privacy notice

Who we are

Daines Gallery (dainesgallery.com) is responsible for the personal data described here. You can reach us through the contact page.

Browsing

You can browse without an account. We set no cookies for visitors and use no advertising or cross-site tracking. We use Vercel Web Analytics and Speed Insights, which measure page views and loading performance without cookies and without identifying you. To rank photographs as “trending” we count daily views per photograph; no IP address or identifier is stored with those counts.

Favourites on this device

If you save favourites without signing in, they are stored in your own browser (local storage) and never sent to us. Clearing your browser data removes them.

Accounts

If you create an account we store your name, username, email address, a one-way hash of your password (never the password itself), whether your email is confirmed, your favourites, and a session record (with the browser and network address used) while you are signed in. A single, essential cookie keeps you signed in. We use these only to run your account.

Community uploads

Images you upload, with the titles and descriptions you give them, are stored with our storage provider and shown publicly once approved. For photographs, basic camera details (camera, lens, exposure) may be read from the file and shown; location data is never shown, and displayed images are re-encoded without their original metadata.

Messages and print enquiries

When you contact us we keep your name, email address and message so we can reply, together with a salted one-way hash of your network address to help us block abuse. We do not use your details for marketing.

Who processes data for us

• Vercel (hosting, analytics)
• Neon (database)
• Cloudinary (image storage and delivery)
• Resend (sending account and notification emails)

How long we keep it

Account data is kept until you delete your account, which you can do at any time from your account page; your uploads and favourites are deleted with it. Messages are kept for up to two years and then deleted.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Contact us and we will respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).