Privacy Policy
Last updated: March 2026
Overview
This site is a personal photography portfolio run by Roy Hubbard. It is not a commercial service. This policy explains what data is collected, why, and what rights you have over it.
Analytics
This site uses Umami, a privacy-focused, open-source analytics platform that is self-hosted on infrastructure I control. Umami does not use cookies and does not collect IP addresses or any personally identifiable information — only aggregate page view and event data. No data is sent to third parties. No cross-site tracking occurs.
Comments
If you leave a comment on a photo or blog post, the following information is collected and stored:
- Your name (as entered)
- Your email address (as entered; not displayed publicly)
- Your website URL (optional; displayed publicly if provided)
- The content of your comment
- Your IP address and browser user-agent string (for spam filtering and moderation)
Comments are held for review before appearing publicly. As part of this review process, comment text may be sent to Anthropic (the maker of Claude) for automated spam classification. Anthropic's privacy policy applies to data processed through their API. Only the comment body is sent — your name, email, and IP address are not included.
If you request deletion of your comments, the text, name, email, and website fields are permanently removed. An anonymised record is retained to preserve thread structure.
Favorites
When you click the heart icon on a photo, a cookie is set in your browser to remember your choice across visits. This cookie contains a random identifier — it is not linked to your name or email address. No account is required.
If you request deletion of favorites, the identifying information (IP address and visitor identifier) stored with your favorite is removed. The aggregate favorite count is not reduced, as it reflects a real interaction that occurred.
Cookies
This site sets the following cookies:
| Name | Purpose | Duration |
|---|---|---|
fav_id | Remembers which photos you have liked, so the heart state persists across visits. | 1 year |
access_token_cookie | JWT session for authenticated users (site owner only). Not set for visitors. | 1 hour |
Data retention
Comment records are retained indefinitely unless you request deletion. Visitor identifiers associated with favorites are retained for up to 1 year. Server access logs (IP addresses, request paths) are retained for up to 90 days.
Your rights
You may request deletion of personal data associated with your email address at any time. Requests are processed within 30 days.
Submit a data deletion request →
For any other questions about data handling on this site, contact roy@royhubbard.photo.