Privacy
What is held, why, where it sits, and who else can see it. There is no second, longer version of this page.
Last updated August 22, 2026
01What is held
Your account: an email address, a password kept only as a hash, and — if you gave them — a name, a photograph, a language and a preference for centimetres or inches. Your catalog: artists, works, photographs, exhibitions, notes and values, which is to say whatever you have recorded.
02Why it is held
To show you your catalog and let the people you invited see it, to sign you in, and to send the few messages the service has to send: an invitation, a password reset, an answer to something you asked.
03Where it lives
On Amazon Web Services in Ohio, in the United States — the records in a Postgres database, the photographs in private storage that is only ever read through links that expire. If you are in Europe or the United Kingdom, that means the data is held outside it.
04Who else sees it
The people you invite to a catalog, and nobody else. Amazon hosts it and Resend delivers the email, and neither may use what passes through them for anything of their own. It is not sold, not published, not advertised against, and not used as training data.
05Cookies
One cookie, which is what signs you in, and it lasts thirty days. There is no analytics, no advertising and no third-party tracker anywhere on this site. The application also keeps an unsaved draft in your own browser, so a dropped connection does not cost you what you had typed.
06The visits log
Every page read here is written down: the address asked for, what the browser says it is, the language it asked for, the internet address it came from and the country that address is in, and the account it was signed in to, if it was. It is how a fault is traced and how we know whether any of this is read at all. It is kept for ninety days and then deleted, it is never joined to anything else, and it goes to nobody.
07How long
For as long as the account exists. Delete a work, a catalog or the account and it is gone from the service; the copies that sit in backups are overwritten in the weeks that follow.
08What you can ask for
A copy of everything, a correction, or deletion. The works list exports as CSV and every photograph downloads at full size, so most of it is already in your hands — and where the law gives you a right to complain to a supervisory authority, this page does not stand in the way.
09Changes to this page
If what is written here changes in a way that matters, it will be said on the site before it takes effect, rather than the date at the top quietly moving.