Privacy and analytics
Gleb Osotov is the controller for this personal gallery. Analytics is optional and remains off unless you accept it. The public gallery continues to work if you reject analytics or if the analytics service is unavailable.
What consent enables
The gallery uses a self-hosted Umami service for audience measurement, photograph engagement, external-referrer acquisition, device and HDR compatibility, client performance, and usability. It records page paths and sessions, four scroll-depth thresholds, Core Web Vitals when supported, country, browser environment, one HDR capability value per session, and one allowlisted main-image outcome on photo pages.
It does not record URL queries or fragments, detailed referrers, region, city, coordinates, captions, alternative text, photo metadata, image addresses or storage keys, DOM text, input values, replay, heatmaps, or generic clicks. It is not used for advertising, cross-site tracking, unrelated-interest profiling, or sale or sharing with another controller.
Country-level IP geolocation uses IP Geolocation by DB-IP.
Identifier, legal basis, and retention
The legal basis for optional analytics is your consent. After acceptance, this browser creates a random pseudonymous identifier. The choice and identifier expire together at a fixed point 13 months after acceptance; visits do not extend that deadline. Individual analytics events and sessions are deleted after 13 months. The analytics database is not backed up and no long-term aggregate archive is created.
Umami and its separate PostgreSQL database run on infrastructure operated for this gallery. The information is available only through the non-public administrative service and is not sent to an advertising analytics provider. Short-lived operational security records are separate from optional visitor analytics.
Analytics settings
Analytics is off
Your current pseudonymous identifier: No active analytics identifier
Your browser is sending Global Privacy Control or Do Not Track. Analytics must remain off until that browser signal is disabled.
Analytics is off. Deletion could not yet be confirmed and will be retried without using the inactive identifier for collection.
Your choices and requests
You can withdraw consent above. Withdrawal stops future collection immediately and asks the live analytics database to delete sessions and events linked to the displayed identifier. You may also request access to or deletion of analytics associated with that identifier, or ask another privacy question, by emailing gleb.osotov@gmail.com.