Privacy

The short version

This is a personal archive run by one person. It collects as little as it can. There is no advertising, no tracking pixels, no third-party analytics, and nothing here is sold or shared for marketing.

The mailing list

If you subscribe, we store your email address, the date you signed up, the page you signed up from, and — as proof that consent was given — the wording you agreed to, your IP address, and your browser's user-agent string at that moment.

The legal basis is your consent. Nothing is sent until you click the confirmation link, and that link expires after 48 hours. You can withdraw consent at any time using the unsubscribe link at the bottom of every email; withdrawal does not affect emails already sent.

The address is used only to send the archive's own occasional email. It is never sold, rented, or passed to anyone for their own purposes.

Takedown requests

If you submit a takedown request, we keep the email address and the text of the request so the claim can be assessed and, if needed, evidenced later.

Visitor counts

Page views are counted using a one-way hash of your IP address and user-agent, combined with a value that changes every day. Your IP address and user-agent themselves are never stored, the hash cannot be reversed, and because it changes daily the same visitor cannot be followed from one day to the next. The result is a daily number, not a profile.

Cookies

No cookies are set for visitors. The only cookies on this site belong to the administrator's login session and are set solely when the site owner signs in.

Who processes this data

The site runs on Vercel (hosting), Supabase (database), Cloudflare (network and image storage), Upstash (rate limiting), and Resend (email delivery). Each processes data only in order to run the site. Some are based in the United States, so subscribing involves your address being processed there.

How long it is kept

Subscriber records are kept until you unsubscribe, plus a short period afterwards so that the unsubscribe itself can be honoured and evidenced. Takedown records are kept as long as needed to document how the claim was handled. Visitor counts are aggregate numbers and are kept indefinitely — they contain nothing that identifies anyone.

Your rights

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted outright. Write to i.am.scans.scans@gmail.com and it will be handled within 30 days. If you are in the EU or UK and are unhappy with the outcome, you may complain to your national data protection authority.

Changes

If this notice changes, the current version is always at this URL. Material changes affecting subscribers will be mentioned in the next email.