Gallery Anonima is designed around anonymity. We collect the minimum data necessary to operate the service:

• Email address — used solely for authentication via one-time passcode (magic link). Your email is never displayed publicly, shared with third parties, or used for marketing.

• Anonymous Public ID — a randomly generated seven-character ID (e.g. g/a1b2c3d) assigned at account creation. This is your only public identity.

• Uploaded images — stored on secure object storage. Images are associated with your anonymous public ID, not your email or real identity. All metadata (EXIF, GPS, camera info) is automatically stripped during upload — only the pixel data is retained.

• IP address — logged by Cloudflare (our DNS and SSL provider) and our server for security, abuse prevention, and rate limiting. We do not use IP addresses to identify or track individual users beyond these purposes.

• User-Agent — the browser or app identifier sent automatically with every request. Used only for compatibility and security purposes.

• Basic analytics — page-view beacons containing: page path, screen size, timezone, country (derived from your IP by Cloudflare), preferred language (from your browser/device), and referrer URL. No cookies, no fingerprinting, no advertising tracking.

• Behavioral events — actions you take on the platform (e.g. upload, save, delete, pin) are logged against your anonymous public ID. These logs are used to understand how the service is used and to detect abuse. Your email is never attached to these records.

The stream can be viewed without an account. For visitors without an account we collect the same minimal technical data described above (IP address, User-Agent, and basic analytics beacons) — no email, no identity, and no cookies. Uploading, saving, pinning, and reporting require an account.

Images uploaded to the stream are publicly viewable by anyone on the internet, with or without an account. They are always attributed to your Anonymous Public ID only — never to your email or any personal information.

All uploaded images are automatically scanned by an AI-based content filter. Images flagged as potentially inappropriate (NSFW) are quarantined and may be reviewed by an administrator. This process is necessary to maintain a safe environment for all users.

Your data is stored on infrastructure hosted in the EU (Frankfurt). Images are stored on object storage with pre-signed URLs that expire after one hour — there are no permanent public links to your work.

When you remove an image from your studio, it enters a deletion queue. Once no other user has the image saved in their exhibition, it is permanently deleted from both the database and object storage. There is no recovery after deletion.

If you delete your account, all your uploaded images are removed from your studio and queued for deletion. Images that other users have saved in their exhibitions will be removed from those exhibitions as part of the account deletion process. Your anonymous public ID and all associated data will be permanently erased.

To delete your account and all associated data, contact [email protected].

We do not sell, share, or provide your data to any third party. The only external services involved are:

• Resend — email delivery for authentication codes only. • Cloudflare — DNS and SSL termination (no analytics or tracking features enabled).

You have the following rights regarding your personal data:

• Access — you may request a copy of the personal data we hold about you. • Correction — you may request that we correct any inaccurate data. • Deletion — you may request that we delete your account and all associated data. • Portability — you may request a structured, machine-readable export of your data. • Objection — you may object to the processing of your data at any time.

To exercise any of these rights, contact [email protected]. We will respond within 30 days.

Gallery Anonima is not intended for users under the age of 16. If you are under 16, you may not use the service. We do not knowingly collect personal data from anyone under 16. If we become aware that a user is under 16, we will delete their account and all associated data.

Gallery Anonima does not use cookies for tracking or advertising. A session token is stored locally on your device to keep you signed in.

We may update this policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the service constitutes acceptance of any changes.

For questions or data requests: [email protected]