Privacy

Updated November 9, 2026. This policy covers the account-enabled Gallery Guide service at galleryguide.app and its connected mobile app.

Your account and collection

You can browse exhibitions without an account and keep a private collection on your device. When you sign in, we store your email address, username, profile details, selected interests and follows, saved shows, visits, collections, Top 8 selections and reviews to provide your account. Email verification establishes access to your email; it does not subscribe you to marketing or grant membership.

Applications and the member community

Joining the member community requires a personal application and approval. Applications include your first name, face photo, introduction, optional links, consent choices and any responses or referral. Your application and review notes are visible to you and the authorized reviewer. Admitted members can see each other's shared profiles and photos, subject to blocking. This is separate from the privacy of your diary, saves and unshared collections.

Reviews have an audience of Public, All members, Friends or Only me. Friends are people who follow each other. Shared reviews need approval; public reviews hide the author's identity outside the member community, although the writing itself may identify its author. Your default audience applies to new reviews. Applying it to past reviews requires a separate confirmation. Private diary notes, exact visit dates, saved shows and unpublished drafts are not included in shared profiles or the following feed. A shared profile may show a visit count and standing when you publish the relevant profile feature.

Messages, photos and reports

Member messages, conversation participation and read positions are stored by the service. Messages are not end-to-end encrypted. The normal moderation screen shows only message excerpts that someone explicitly selects and submits in a report, rather than unrestricted inbox access. Authorized service operators and hosting providers can technically access stored data as needed to operate the service.

Profile photos are resized and re-encoded to remove embedded metadata. Event photos, where enabled, require a rights confirmation and review before publication. Reports and moderation decisions are visible to authorized reviewers. Blocking and withdrawal change subsequent access; we cannot recall copies someone has already saved. Upload only images you have permission to use.

Service operation

Cloudflare provides the domain and DNS, Railway hosts the application and database, and Resend delivers verification and other requested service emails. These providers process the information needed to operate their services. We do not sell personal data or use an advertising SDK.

Authentication uses short-lived, single-use codes and expiring sessions. The service uses limited security and request information, including network addresses, to rate-limit abuse. Technical providers may maintain their own security and diagnostic logs. Gallery Guide records limited aggregate engagement counts; these do not establish attendance or social-media publication.

Maps and external links

Listings, search and included artwork can be stored on your device. Map tiles are requested from OpenFreeMap, which receives network information such as your IP address. Opening a gallery, directions or social link connects to that provider under its own privacy policy. Search filters and your optional starting-map preference stay on your device. This version does not request contacts or device location permission.

Opening registrations

If you explicitly register for a gallery-managed opening, the relevant approved gallery manager receives the registration details shown in that flow. Saving an opening, indicating interest, registering and confirming attendance are separate actions.

Export, deletion and retention

You can export your account data or delete your account from your profile's account controls. Deletion removes active profile content, account photos, sessions and follow relationships, and clears your authored messages and their reported excerpts. Conversation records may retain an anonymous deleted-participant marker. Private backups are scheduled for deletion after 27 days. A minimal deletion record is retained to prevent restored backups from reviving deleted accounts. Provider security logs and records that must be retained for legal or abuse-prevention reasons may follow separate retention requirements.

Signing out does not erase private drafts stored on your device. Device data can be cleared using the app's controls or your device/browser storage settings. For access or deletion assistance, contact us below.

Contact

Email taylore.rock@gmail.com for privacy questions or support. We will update this page when the service's data practices change.