Unveil

Unveil

one lens  ·  one voice  ·  every frame

Privacy

The short version

Unveil is a personal photo gallery. Anyone can look at it. Only the owner can post to it. A small amount of information about each visit is recorded, mainly so that abuse can be blocked. Nothing is sold, there are no adverts, and nothing is shared with advertisers.

What gets recorded

When you visit this site, the following is collected:

• Your IP address. This is recorded by Cloudflare, which sits in front of the site.
• Your browser and operating system
• Your time zone and language settings
• Your screen and window size
• Whether you are on a phone or a computer
• Which pages and categories you viewed
• The site you arrived from, if you followed a link
• The date and time of your visit
• A random ID kept in your browser, which links repeat visits from the same device

Why your IP address is recorded

Your IP address is logged for safety and security, and for no other purpose. Specifically:

• To block people who attack the site or try to take it offline
• To stop automated bots from scraping or flooding it
• To spot anyone trying to break into the owner account
• To keep evidence if something ever needs reporting

This is normal practice. Effectively every website and web server on the internet records IP addresses for these same reasons. Your IP address is not used to follow you around other websites, and it is never sold or handed to anyone for marketing.

Sign in attempts

Every attempt to sign in to the owner account is recorded, whether it succeeds or fails. That record includes the time, the device and browser used, and the email address that was typed. This exists so that break in attempts are visible and can be acted on.

Likes, comments and reviews

You can like a post, comment on a post, and leave a review of the site. None of that requires an account. What gets stored is only what you actually submit, along with the random device ID described above and the date and time.

• Likes. The post you liked and your device ID. One like per post per device.
• Comments. What you wrote, the name you typed if you typed one, and your device ID. The name field is optional and can be anything. Please do not put your real name, email address, or anything else you would not want public.
• Reviews. Your star rating, what you wrote if you wrote anything, and your device ID. One review per device, and posting again replaces it.

Comments and reviews are public the moment you post them. Anyone visiting the site can read them. Your device ID is not shown to other visitors, but the owner can see it, which is how a device that is abusing the comments gets blocked.

The owner can hide any comment or review, and can block a device from posting again. Hidden items stay in the database rather than being erased, in case something needs to be reported. Rate limits and length limits apply to everyone.

How long any of it is kept

Visit records are kept for roughly 90 days. Sign in records are kept for roughly 180 days, because they may be needed if an incident has to be reported. Likes, comments and reviews are kept for as long as they are on the site. Cloudflare and Supabase keep their own logs on their own schedules.

Who can see it

Only the owner of the site. Visitors cannot read these logs, and the database rules block any attempt to do so. The data is stored with Supabase and Cloudflare, who each have their own privacy policies.

Cookies and browser storage

Unveil sets no tracking cookies and uses no third party analytics. Your browser does keep a few small values locally, which never leave your device except as already described:

• A random visitor ID
• A note that you accepted the entry notice. This is cleared when you close the tab, unless you chose never to be shown it again
• Whether you dismissed an announcement
• The name you last used on a comment, so you do not have to retype it
• A counter used to slow down repeated failed sign in attempts

You can remove all of it at any time by clearing site data in your browser.

The photos themselves

Everything posted here is public. Anyone holding a link can view it and can save it. Please do not treat anything on this site as private. Some posts are marked suggestive and appear blurred until you choose to reveal them, but that is a courtesy warning rather than access control.

Your choices

• You may ask for your visit records to be deleted. Contact the owner through the Discord link at the top of the site.
• You may ask for a comment or review you posted to be taken down. Same route, through Discord.
• You may block cookies and local storage in your browser, though parts of the site will stop working properly.
• You may use a VPN if you would prefer your real IP address not be recorded.

Children

This site is not aimed at children under 13.

Changes to this policy

If this policy changes, the date at the top will change with it. Anything significant will be announced on the site itself.

Contact

Reach the owner through the Discord link in the header.