Privacy

Overview

This is a personal photography website. The public website does not use analytics, advertising, tracking pixels, social-media embeds, externally hosted fonts, or non-essential cookies.

Server logs

The hosting provider may process technical access data such as IP address, date and time, requested page, referrer, browser, and operating system to deliver and secure the website. Retention and processing depend on the selected hosting provider and should be updated here after hosting is chosen.

Cookies and local storage

Public visitors are not assigned preference or tracking cookies by this website. WordPress uses strictly necessary authentication cookies only when an authorised administrator signs in to the private dashboard. When a visitor actively selects Light, Dark, or Ambilight, the non-identifying display-mode value is stored only in the browser’s session storage so the choice remains consistent while navigating the website. It is not transmitted to this website or any third party and is discarded when the browser tab session ends.

Password-protected projects

When a visitor unlocks a password-protected project, an expiring access token is stored in the browser’s session storage so the complete project remains available while navigating in that browser session. The password itself is not retained in the browser and no access cookie is created. To slow repeated password guesses, the website temporarily stores a one-way pseudonymous value derived from the visitor’s IP address and project for up to 15 minutes after failed attempts. Access tokens expire no later than 12 hours after issue.

Image metadata

Selected camera and exposure information may be displayed with photographs. Location and GPS metadata are removed from uploaded image files before publication.

Contact and your rights

For questions about privacy or requests concerning personal data, contact mail@geroschomaker.com. Add the legally required controller identity and postal address here before publishing the website.

This starter notice must be reviewed and adapted when the production host, contact features, or plugins are selected. It is not legal advice.