Privacy policy

Who is responsible

yaelrozen.com is operated for the photographer Yael Rozen. For any privacy question, or any request about your own data: yaeltau@gmail.com.

What we collect

Information you give us yourself:

• When ordering a print — name, email address, telephone, country and shipping address, and the details of the order (photograph, size, paper, quantity).
• When requesting a licence — name, email address, organisation, and the intended use of the photograph.
• When writing through the contact page — what you wrote and the email address we can reply to.

Technical information collected automatically:

• Your IP address is not stored as such. To guard against repeated form submissions and abuse, only a one-way hash of it is kept, salted with a secret key — a value that cannot be turned back into an address.
• The hosting servers keep short-lived technical access logs, as every site does, for operation and security.

Cookies and browser storage

There are no advertising cookies, tracking cookies or analytics tools of any kind on this site. There is no Google Analytics and there are no social-network pixels. Even the fonts are served from the site’s own server, so reading a page sends nothing to a third party.

What is kept in your browser:

• A cookie named yr_viewer — a random identifier, with no name or address attached, created only if you react to a journal post, so the site remembers that you already did. It lasts two years, and we store it only in hashed form.
• Local storage — the list of photographs you added to “my selection”. The list stays on your own device and is not sent to us.
• Session storage — your place in the archive and the room view you chose, so you do not lose them. It is deleted when you close the tab.
• A sign-in cookie for the private desk — created only for Yael and Shahar when they sign in to the admin interface; it has nothing to do with visitors.

What we use it for

• To handle an order or a licence request: to send a quote, to keep you updated, and to ship the print.
• To answer a message you sent us.
• To meet the bookkeeping and tax obligations that apply to a business in Israel.
• To keep the site safe: preventing form flooding, spam and abuse.

We do not send marketing mail and we do not add anyone to a mailing list. If we ever wish to, we will ask your consent first.

Who else sees it

To run a site and ship prints we rely on service providers, who see only what their work requires:

• Vercel — hosting.
• Supabase — the database holding orders and requests.
• Resend — sending the site’s email.
• The printing lab and the courier — receive only your name and shipping address, and only when there is an order to ship.

Some of these services run servers outside Israel, so data may be stored or processed in another country. Beyond this, we pass information to no one, and we never sell it.

How long we keep it

Order and licence details are kept for as long as handling them requires, and after that for the period Israeli tax law requires transaction records to be kept (seven years). A message that led to no order is deleted once it is no longer needed. You may ask us to delete data earlier, as far as the law allows.

Your rights

You may ask to see the information we hold about you, to correct it if it is wrong, or to have it deleted. Visitors from the European Union are additionally entitled to object to processing, to restrict it, and to receive a copy of their data in a portable format. For any such request, write to yaeltau@gmail.com and we will deal with it.

Security

The site is served over encrypted connections (HTTPS). Access to the database is closed and limited to the site’s own server, the admin interface is protected by a password and approved devices, and order-tracking links are stored only in hashed form. No method is completely immune, and we keep improving.

Minors, and changes to this policy

The site is not aimed at children, and we do not knowingly collect information about minors under 16. If this policy changes, the date at the top of the page will change with it, and the new version applies from the moment it is published.