Privacy and cookies

Effective October 25, 2026

Who we are

ronnieharan.com is the official website of Ronnie Haran and her photo archive ("we," "us"). This page explains what information the site collects, why, and the choices you have. Questions go through the contact form.

Cookies

This site does not set cookies. There is no analytics, advertising, social media pixel, or any other tracking code, and no third party places cookies through this site.

The site does use your browser's session storage, which is cleared when you close the tab, for two things that only work because you asked for them:

• Music player. If you press play, the player remembers which song you were on so it can pick up where you left off on the next page. Nothing is stored until you press play.
• Staff sign-in. The archive's private review page keeps the staff member signed in for that tab. Visitors never see this page.

Private gallery links carry an access key in the web address itself, not in a cookie. Because none of this tracks you or is shared with anyone, there is nothing to accept or decline, so the site does not show a cookie banner. If that ever changes, we will ask for your consent first and update this page.

Fonts and media

All fonts are hosted on this site. No font or code request goes to Google or another outside service when you load a page.

The soundtrack player streams 30-second previews from Spotify. Nothing loads from Spotify until you press play. When you do, your browser connects to Spotify's servers, which receive your IP address the way any web server does. Links that open a song on Spotify, or articles on other websites, take you to sites with their own privacy policies.

Information you give us

• Contact form: your name, email, the reason you chose and your message.
• Newsletter signup: your email address.
• Vault access requests: your name, email, company, role, reason for viewing, any message, and your signed nondisclosure agreement. To make the electronic signature valid, the signed record also includes the time you signed, your IP address, approximate location based on that IP address, and your browser type.
• Access codes: the code you enter, so we can open the gallery and record when the preview started and ended.

How we use it

We use this information to answer your message, send the newsletter you asked for, review Vault requests, enforce the nondisclosure agreement, run the private preview, and protect the site from spam and abuse. We do not sell your personal information, and we do not share it for advertising.

Service providers

A few companies process information for us, only to provide their service:

• Netlify hosts the site, receives form submissions, and keeps standard server logs (such as IP address and browser type) for security and reliability.
• Brevo stores the newsletter list and sends the newsletter and welcome emails.
• Spotify serves music previews, only when you press play.

These providers may store data in the United States. We may also disclose information if the law requires it, or to protect the rights of Ronnie Haran and her archive, including enforcing a signed nondisclosure agreement.

How long we keep it

Newsletter addresses stay on the list until you unsubscribe. Messages are kept as long as needed to respond and follow up. Vault requests and signed agreements are kept for as long as the agreement can be enforced, because they are the record of what was agreed to.

Your choices and rights

• Every newsletter has a one-click unsubscribe link.
• You can ask to see, correct, or delete the personal information we hold about you through the contact form. Choose "Something else" and tell us what you need. We will not treat you differently for asking.
• California residents have the right to know what personal information is collected, to delete or correct it, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. You can also ask us, once a year, about any disclosure of personal information to third parties for their direct marketing; we make none.
• Visitors in the EU, UK and similar regions may also object to or restrict processing, request a portable copy, and complain to their local data protection authority. Our legal bases are your consent (newsletter), taking steps at your request (Vault access and the agreement), and our legitimate interest in answering messages and keeping the site secure.

Do Not Track and Global Privacy Control

Because this site does not track visitors across sites or over time, it treats every visitor as if a Do Not Track or Global Privacy Control signal were turned on. No setting is needed.

Children

This site is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has sent us information, let us know and we will delete it.

Changes

If this policy changes, we will post the new version here with a new effective date.

Contact

For any privacy question or request, use the contact form.