Privacy policy, version 2026-08-17
One cookie, and two you can refuse.
This is the whole list. If a cookie is not named on this page, this site does not set it, and if we ever add one this policy version changes and you are asked again.
What is set
Necessary, and not a choice
These make the site work at all. There is exactly one, and its whole job is to stop us asking you the same question twice.
| Name | What it does | How long |
|---|---|---|
| artful-consent | Remembers this decision, and which version of this policy you made it under. Without it you would be asked on every page. | One year |
Optional
Analytics and marketing
There is no analytics provider configured on this deployment at all, so today this section describes a possibility rather than a practice: whatever you choose, no analytics script exists to load. When one is added it will be named here, with its own cookies and their durations, and the policy version above will change so that you are asked again rather than carried over.
We do not put tracking pixels in email, to you or to a gallery's collectors, and we do not sell anything measured here to anyone.
Your choice
Change it whenever you like
This is the same control the banner offers, and it is here permanently. Refusing takes effect on the next page you load, and there is nothing to undo, because nothing was loaded.
How the refusal is enforced
Two gates, not a promise
- A page served to somebody who has not decided, or who has decided no, contains no reference to an analytics script. Nothing is hidden and switched on later.
- The same response carries a content security policy that names the analytics origin only when the stored decision permits it. If a mistake ever put a tag in the page, the browser would refuse to load it.