How this site handles your information

ljf.lu is my personal photography site. I'm Leonard John French, and I'm responsible for the information described here. You can reach me at ljf@ljf.lu. The site collects very little, uses no cookies and shows no advertising.

Messages and print inquiries

When you use the form on a photograph's page or "Write to me" on the About page, the site receives your name, your email address, your message, which photograph you mean, and whether you ticked "interested in a print". It also records the IP address the message came from and your browser's identification string, which are used only to stop spam and abuse. I use your details to reply to you and, if you ask for a print, to arrange it. A confirmation is emailed to the address you give.

The legal basis is taking the steps you've asked for, and my legitimate interest in answering messages and keeping the forms free of spam.

Visitor statistics

The site counts page views and a few actions (photos opened in the viewer, gallery filters used, background colours chosen) with its own simple statistics. For each it records the page, the name of the website you came from, whether you're on a phone or a computer, and an anonymous code that changes every day. The code is made from your IP address and browser together with a random value that is deleted each day, so it can't be used to recognise you on another day or to identify you. No cookies are used and no IP address is stored. If your browser sends Global Privacy Control or Do Not Track, nothing is recorded.

The legal basis is my legitimate interest in knowing how the site is used.

Private likes

Private likes record only which photo was liked and when. Nothing about you is stored with them, and no counts are shown. To limit abuse, the site holds the sending IP address in memory for ten minutes (never on disk) to cap how many likes it accepts from one place. The legal basis is my legitimate interest in feedback on the photographs.

What your browser remembers

If you choose a background colour, or send a private like, your browser remembers that in its own storage so the site can show it next time. It is never sent to me.

Server logs

Like most websites, the web server records the IP address, page, date and time, and browser of each request. They are used to keep the site secure and working.

Who else handles it

Messages reach me by email: Resend delivers the site's email, and my mailbox is with Google Workspace. The site runs on a server rented from Akamai (Linode). These providers handle the information only to provide their service to me. Resend and Google are US companies, so a message may be processed outside the European Union. I don't sell your information or share it with anyone for their own marketing. I may disclose it if the law requires.

How long it's kept

• The site's copy of a message: 90 days, then deleted automatically. The emailed copy stays in my mailbox with my correspondence for as long as I need it.
• Server logs: 14 days.
• Backups of the server, which include the site's copy of messages: up to 104 days (14 days on the server, and daily snapshots of those backups kept for 90 days on my own backup storage).
• Visitor statistics: 400 days. They contain nothing that identifies you.
• Private likes: kept, as they contain only the photo and the time.

Your rights

Under EU data protection law (the GDPR) you can ask what information I hold about you, have it corrected or deleted, restrict or object to how it's used, and receive a copy of it. Email ljf@ljf.lu. You can also complain to Luxembourg's data protection authority, the CNPD.

Changes

If this notice changes, the new version will appear here with a new date.