loupe

A draft, not yet in force. loupe publishes this so it can be read and reviewed before it applies to anyone. Words in a [marked box] are decisions not yet made. Questions or corrections: [email protected].

Privacy

Last changed: [date of publication]

loupe holds artists' work and the records about it. We collect as little about people as running that takes. We don't show ads, we don't sell or rent information about anyone, and nothing on an artist's site reports to an advertising or analytics company.

Artists, managers and helpers

If you use stanza

stanza is loupe's companion, run by the same owner, and comes with a paid plan. Nothing reaches it until you click open stanza on your pages. Then loupe sends stanza your name, your email address and your catalogue's name, to sign you in there, and lets stanza read what its tools show: the copies of your photographs made for the screen (never your originals), their titles, captions and file names, your galleries' names and your statement. stanza keeps the email address of whoever signed in last, so it can write to you about your rooms. A room you make in stanza becomes a page of your site, kept by loupe like any other page. Nothing on your site loads from stanza, and nothing there names it.

If you signed up on stanza's own pages and have no loupe site, loupe keeps your stanza account behind those pages: your name, your email address, a securely hashed password, and the pictures you add, with their copies for the screen. You sign in, set a new password and change your name on stanza's pages, and every letter comes from stanza; loupe writes to you about nothing. What you can ask for, below, you can ask of either.

Stewards

We hold a steward's email address, and whatever name the artist gives, so we can tell them they've been named and send the letters the terms describe. A steward can ask us at any time to stop being a steward. We then tell the artist.

People an artist invites to their archive

If an artist invites you to their archive, we hold your email address, the name the artist gives, a securely hashed password, and when you last came in — to let you in and to write to you about it (your invitation, and a new password if you ask for one). The artist sees the same list. When the artist takes you off, or you ask them or us to, all of it is deleted.

People who come in from a family archive

An artist's catalogue may accept guests from one family archive that presents the artist's work. If you're signed in there and click through, the family archive sends us a code in place of your name, the same each time you come unless the family archive changes its key, so you can come in without a password. We hold that code and when you last came in, and nothing else: never your name or email address. The artist sees only how many people have come in this way, and when the last one did. When the artist stops accepting guests from that archive, all of it is deleted.

People pictured in the work

Artists may record who appears in a photograph. Those names are part of the artist's private record:

• never shown on any public page, and never searchable by the public — an artist whose archive is open only to people they have invited by name may let those people find them there;
• left out of files visitors download, unless the artist turns that on;
• kept in the artist's own copy to keep and in the packets they make.

If you're pictured in an artist's work and want something changed, write to the artist, or to us and we'll pass it on. See the terms, section 8.

Visitors to an artist's site

• No tracking. The typefaces are served by loupe itself, and nothing on an artist's site loads from Google or any advertising or analytics service — until you click to play a video or show a map; then that one player loads from YouTube, Vimeo, Strava or AllTrails.
• No cookies on an artist's own domain, with one exception. If an artist invites you by name to their archive, or you come in from a family archive the artist accepts, signing in there sets one cookie on the artist's address. It keeps you signed in and does nothing else, and it ends when you sign out, when the artist takes you off, or after 30 days (12 hours if you came from a family archive). Artists and their helpers sign in only at app.loupe.pictures, which uses a cookie to keep you signed in and to remember a few display choices.
• No visit counting. loupe doesn't count or measure visits to artists' sites. [Analytics is a separate project. If loupe adds visit counts later, this paragraph is rewritten to say exactly what is counted, and managers get notice under Changes below.]
• Addresses. Like every web service, our servers see your IP address. We use it to keep loupe working and to stop abuse, such as limiting sign-in attempts and contact-form spam. We keep it in server logs for [30 days].
• Gathering works. When you gather works in an artist's archive, the selection lives in the page's address. Nothing about you or your selection is stored.
• Contact forms. A message you send through an artist's contact form is kept for the artist in their catalogue and emailed to them, with your address set so they can reply. The artist decides how long to keep it, and can delete it.

Who else handles data for loupe

We use a small number of providers. Each handles only what its job needs.

Data is stored in the United States: files in Backblaze's US East region. [Confirm Railway's region.]

How long we keep things

• Your catalogue: while your account exists, under the holds in the terms (sections 13 and 16).
• Restore points: Free keeps 7 daily. Member keeps 30 daily and 12 monthly.
• Recently deleted: a photograph or work you delete waits in recently deleted for the number of days your catalogue keeps — 7 unless you choose, from 1 to 30 — and you can put it back until then. What waits there doesn't count against your catalogue's space. You can delete it for good sooner.
• After something is deleted for good: its files and its record leave our storage and every backup within 30 days. A restore point keeps a catalogue's record as it was when the point was taken, for as long as that point is kept (above).
• Billing records: as long as tax law requires. [e.g. 7 years]

What you can ask for

You can download everything in your catalogue from your account page, with no request needed: the record any day, and every original once a week. You can also ask us to show what we hold about you, correct it, or delete your account. Write to [[email protected]]. We answer within [30 days]. [Lawyer: at launch loupe sells in the US only. Check which state privacy laws apply, and whether visitors from the EU or UK need a GDPR section.]

Children

loupe isn't meant for children under 13, and we don't knowingly hold their personal information as users. A photograph of a child in an artist's work is part of that artist's record and follows the rules for people pictured above.

Changes

We'll write to managers before a change to this page that affects them, and put the date at the top.

loupe · loupe.pictures · what to keep · sign in