Privacy Policy

Henrik Aleborg is the data controller for personal data processed through this site. Questions about this policy or about your data can be sent to henrik.aleborg@gmail.com.

Browsing the gallery requires no account and no personal information. The site does not use analytics, advertising networks, tracking pixels or third-party profiling.

As with any website, the hosting provider processes technical request data (such as IP address, time of request and browser type) to deliver pages and protect the service against abuse.

The admin view is only for the site owner. When an account is used, the site stores:

• the email address used for the account,
• when Google sign-in is chosen, the name and email address supplied by Google for that account,
• timestamps for account creation and sign-in, kept by the authentication service.

No passwords are visible to the site; they are stored in hashed form by the authentication service.

Photographs uploaded through the admin view, together with their titles and categories, are stored in the site's own database and file storage. Image files may contain embedded EXIF metadata (for example aperture, focal length and ISO); aperture, focal length and ISO are displayed publicly in the enlarged image view. Do not upload images with metadata you do not want made public.

• Account data is processed to give the owner secure access to manage the gallery — legitimate interest and, where an account is created, performance of the requested service.
• Technical request data is processed to operate and secure the site — legitimate interest.
• Email correspondence sent to the address above is processed to answer the inquiry — legitimate interest.

• The hosting and backend provider that runs this site, its database, file storage and authentication.
• Google, only if Google sign-in is used for an admin account.

No personal data is sold, rented or shared for marketing purposes. Data may be processed outside the EU/EEA by these providers under their standard safeguards.

Account data is kept for as long as the account exists and is deleted when the account is removed. Gallery content is kept until it is deleted in the admin view. Email correspondence is kept as long as needed to handle the inquiry.

Under the GDPR you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, and you may object to processing based on legitimate interest. Requests can be sent to the email address above.

If you believe your data is handled incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

The site uses only strictly necessary storage. Details are on the cookies page.

This policy may be updated as the site changes. It describes current practice and is not a legal review or a certification of compliance.