WhyDoubleU Photography is a division of Crexels Inc. (“WhyDoubleU”, “we”, “us”). This policy explains what information we collect on whydoubleu.com, why we collect it, who sees it, and the choices you have. We keep it short and plain on purpose. We do not sell your personal information, and we do not use advertising or tracking cookies.
1. The information we collect
When you visit the website
Like any website, our server automatically records the address of the device you connect from (your IP address), the type of browser, the pages requested and the time. We use these logs for security and troubleshooting and keep them for about 14 days. The site also sets one small cookie (see Cookie Notice).
When you contact us
If you use a contact form, we collect your name, email address, your phone number if you choose to give it, your message, and the photo or page you were looking at when you wrote. The message is saved in our private inbox on the website and emailed to us so that we can reply.
When you use a private client gallery
To give you access we hold:
- your email address, and your name and mobile phone number if we have them;
- your password, stored only as a one-way scrambled value (a “hash”). We cannot read or recover it;
- which galleries you can open, and the photos you mark as favorites;
- a record of your activity: when you sign in, open a gallery, view photos and download photos or ZIP files, together with your IP address and browser type. We use this to run the galleries, to show the photographer how a gallery is being used, and to keep accounts secure.
The galleries themselves contain photographs from your session. They are kept in private cloud storage that has no public web address. They can only be opened through your signed-in account, using temporary links.
When a gallery is shared with someone
If we turn on sharing for a gallery, a client can invite a friend or family member by typing that person’s name and email address. We use those details only to create their access and to send them one email with a personal link. We record who shared the gallery with whom, and we notify the photographer. If you receive an invitation you did not expect, you can ignore it, or email us at the address below and we will remove your details.
Newsletter and journal
Our journal is published on Substack. The sign-up box on some of our pages is provided by Substack, which collects and handles the email address you enter under its own privacy policy. We do not receive your password or payment details there.
Reviews
The reviews on our pages are public Google reviews, shown with the reviewer’s public name and photo as Google provides them.
2. How we use your information
- to reply to your enquiries and plan your session;
- to create and run your private gallery, deliver your photos and email you invitations and password links;
- to keep the website and accounts secure and prevent abuse;
- to keep business records, and to meet legal obligations.
We do not sell your personal information. We do not share it for advertising. We do not make automated decisions about you.
3. Who we share it with
We share information only with the companies that help us run the site, and only as needed for that job:
- IONOS: website hosting and email.
- Cloudflare: storage for photographs and videos.
- Google: the fonts used on this site are loaded from Google’s servers, which means your browser contacts Google when a page loads; and we use Google’s service to display public reviews.
- Substack: the journal and newsletter sign-up.
- People you choose: if a client shares a gallery, the person they invite can see that gallery.
We may also disclose information if the law requires it, to protect people’s safety or our rights, or if the business is sold or reorganized (in which case the new owner must honor this policy). Invoices and payments for our services are handled by Crexels Inc.; this website does not take card payments.
4. Cookies
We use one essential cookie that keeps the site secure and keeps you signed in to a client gallery. We do not use analytics, advertising or tracking cookies, so there is no cookie banner. Details are in the Cookie Notice.
5. How long we keep information
- Server logs: about 14 days.
- Contact messages: until we delete them. Ask us and we will delete yours.
- Client accounts, galleries and activity records: for as long as the gallery is online and we have a business reason to keep it, then until you ask us to delete it.
We do not delete client galleries automatically, so ask us if you would like yours removed.
6. How we protect it
The site uses encrypted connections (HTTPS). Passwords are stored as hashes. Photographs are in private storage and opened with short-lived links. Only the photographer can use the administration area. No system is perfectly secure, so please use a password you do not use elsewhere and sign out on shared computers.
7. Your choices and rights
You can ask us at any time to tell you what we hold about you, to correct it, or to delete it, and a client can stop sharing a gallery from the Share window in the gallery. To unsubscribe from the newsletter, use the link in any Substack email. To make a request, email yaniv@whydoubleu.com. We may need to confirm it is really you before we act, and we will reply within 45 days.
California residents
If you live in California you have the right to know what personal information we collect and how it is used, to request a copy, to request correction or deletion, and not to be treated differently for using these rights. We have not sold or shared personal information for advertising in the past 12 months, so there is nothing to opt out of. Our site does not track you across other sites, so browser “Do Not Track” and Global Privacy Control signals do not change what we do. You may also use an authorized agent to make a request on your behalf.
8. Children
This website is not directed to children under 13, and we do not knowingly collect their information through it. A parent or guardian may create or manage a gallery that includes photographs of their child. If you believe a child has given us personal information, email us and we will delete it.
9. Where information is processed
We are based in the United States. Our service providers may process information in the United States and in other countries.
10. Changes to this policy
If we change this policy we will post the new version here and update the date at the top. If a change is significant, we will tell clients with a gallery by email.
11. Contact
Crexels Inc., doing business as WhyDoubleU Photography
Email: yaniv@whydoubleu.com
See also our Terms of Use and Cookie Notice.