A clear view of your choices.

Who runs this site

Zoey Seraphina Rose operates this portfolio. To ask a privacy question or request access to or deletion of information connected with you, use the contact form. Include enough detail to locate the record. She may need to verify the request before acting.

Your choices

Website and artwork viewing analytics start on for a new visitor. When enabled on the site, Google Analytics measurement starts on for new and existing visitors, initially without analytics cookies. Each measurement category can be turned off separately. Google analytics cookies and the other optional categories start off. You can accept, reject, or change any category at any time with the Privacy settings. A necessary local-storage record remembers that choice for 180 days. Do Not Track or Global Privacy Control keeps all analytics categories off. Existing saved choices for Cloudflare, artwork, and theme analytics are preserved. Google Analytics has its own controls: an older saved choice does not grant permission for Google cookies, and an explicit Google Analytics opt-out remains off. Returning visitors are shown the updated banner so they can review the new Google controls. Accept all enables Google measurements and Google analytics cookies along with the other available categories. Clearing site data removes the saved choice: the banner appears again, and default-on measurements may start again unless your browser sends one of those privacy signals.

What the site uses

Necessary operation and security

The site uses a consent record to remember your choices. Cloudflare hosts and delivers the site and may process request, device, and network information in its infrastructure and logs. When you choose a protected action, Cloudflare Turnstile processes information needed to detect abuse. These protections cannot be turned off while using that action.

See Cloudflare's general privacy policy and its Turnstile privacy policy. Cloudflare controls its own logging and retention; this notice does not promise a particular provider log period.

Preferences (optional)

If you allow preferences, your selected light or dark appearance is stored in your browser's local storage until you reset it, withdraw permission, or clear site data. Without this permission, your appearance choice lasts only on the current page. Discover mixes do not use a saved preference, browser identifier, or browsing history.

Engagement (optional)

If you allow engagement and choose to like or comment, the site creates a signed random cookie lasting up to one year. A pseudonymous internal identifier derived from it connects your likes and comments across artworks. It is not a login and does not establish who you are. You can browse, read, and use sharing links without enabling engagement. For abuse prevention, the application uses short-lived keyed hashes of network prefixes and, for admin authentication, IP addresses. These checks also protect API reads and analytics submissions. It does not store a device fingerprint or raw IP address in engagement records. Cloudflare separately processes network and verification data as described above.

Comments may include an optional display name. Names are unverified. Your browser cookie lets the site show your own recent submissions before they are visible to other visitors. Comments may be moderated or removed. Clearing the cookie or turning off engagement permission removes this browser’s access to its unpublished submissions; it does not delete the stored comments.

Artwork and comment likes and approved comment totals may also inform the gallery's default ordering. Together with allowed artwork viewing measurements, they help surface community favorites. The default Discover order also mixes a few new and less-seen pieces into varying positions among community favorites, less often farther down the gallery. It is not a strict vote tally or the same list for every visitor. Google Analytics does not supply these rankings. Approved comment totals can be shown publicly; detailed engagement scores remain private.

Like records are eligible for deletion after 365 days. Pending and rejected comment content is eligible to be erased after 30 days without an update; approved comments remain until withdrawn or removed. Cleanup runs in bounded batches, so these periods are targets rather than a promise that deletion happens at an exact moment. Providers may retain recovery copies separately; their exact periods are not guaranteed here.

Website analytics (on by default)

While website analytics is on, Cloudflare Web Analytics receives page URLs, referrers, browser and device information, and page-load performance measurements. The beacon does not create analytics cookies. Reports go directly to Cloudflare’s analytics service without this site’s cookies. Cloudflare processes this information under its own privacy policy and controls its retention.

Google Analytics (measurement on by default; cookies optional)

When enabled on the site, Google Analytics helps her understand visits and interactions with public pages. Its tag loads by default and can send cookieless measurements before you make a choice. These requests still go to Google and include consent state, page and device information, and network information needed to deliver the request. Cookieless does not mean that no information leaves your browser.

Enhanced Measurement can also record scrolling, outbound-link clicks, file downloads, supported video interactions, site-search terms, and form-interaction metadata such as form identifiers and destinations. The integration does not add contact-message text, comment text, names, email addresses, or the engagement cookie's identity to analytics events. It supplies page URLs without query strings or fragments and reduces referrers to their origin. Google's automatic event fields are governed by the stream's Enhanced Measurement settings.

If you allow Google analytics cookies, Google may recognize visits using first-party analytics cookies configured to expire after up to 90 days. These cookies start off, including for visitors with older saved settings. Advertising storage, advertising user-data consent, personalized advertising, and Google Signals are disabled by this integration. Google Analytics is separate from the site's first-party artwork-viewing counts and does not supply the gallery's rankings.

You can stop Google measurements or withdraw cookie permission in Privacy settings. Withdrawal clears the site's Google analytics cookies and reloads the page to stop or restart the tag with the new choice. Measurements already received are not deleted by clearing cookies. Google processes data under its own policies and the property's retention settings; aggregate reports and provider copies can have different retention. See Google's privacy policy and how Google uses information from partner sites.

Artwork viewing analytics (on by default)

When collection is enabled by the operator, the site counts a successfully loaded full-artwork viewer open and the time the artwork remains visible in a focused browser tab, up to 15 minutes. It may also estimate attention to a loaded gallery image while at least half of it is visible. Only one thumbnail receives time at once, and at least two seconds are required. Fullscreen and thumbnail timing pauses after ten seconds without an interaction. Collection previews, failed image loads, covered gallery cards, and the private owner workspace do not create views. Closing the viewer, switching pieces, or leaving the page sends the recorded time on a best-effort basis, so some views have no duration measurement.

In your browser, a random request ID and server-issued token are held only in memory for that measurement. Requests omit cookies and referrer information. The server stores a hashed request ID, artwork ID, timestamps, completion state, and recorded duration for the event; this is not a persistent visitor identity. For abuse prevention, it also keeps short-lived keyed hashes of network prefixes and request counters. The application does not retain raw IP addresses or browser user-agent strings in these records. Cloudflare separately processes network information while delivering the requests.

Per-viewing records expire after 20 minutes, network counters after one to two hours, and global request counters after one to two UTC days. Private daily viewing totals cover a rolling window of 14 UTC dates, including today. Expired records become eligible for deletion by scheduled, bounded cleanup; expiry does not guarantee immediate deletion or deletion of provider logs and backups. Derived viewing summaries used for ranking are replaced when the ranking refresh runs.

Viewing totals and recorded duration help her understand interest in the artwork and may contribute to the gallery's default ordering. Viewing totals, durations, and detailed scores are not shown publicly, although the resulting artwork order is public. These measurements count viewing events and conservative thumbnail estimates, not unique people or proof of attention. This feature uses no analytics cookie, persistent browser tracking ID, account, device fingerprint, or third-party SDK. Turning it off stops further timing and new requests. Requests already sent cannot be recalled, and measurements already received are not erased.

When historical rankings are enabled, the gallery keeps daily ranking observations for its six-month average and weekly totals of likes, approved comments, comment likes, and viewing activity. These records identify artworks, not visitors. Weekly archives cover the current Chicago calendar week and up to 26 completed weeks; storage keeps up to 28 periods to allow bounded cleanup. Daily ranking records are capped at 200 dates. Historical daily ranks are observations of the gallery at that time; later moderation can change weekly results. Scores and viewing totals are visible only in the owner workspace.

Theme analytics (optional)

If enabled by the operator and allowed by you, a first-party endpoint also records the theme, page section, view or theme-change event, and timestamp as aggregate measurements. It does not send an analytics identifier. Do Not Track or Global Privacy Control stops website, artwork viewing, Google, and theme analytics.

Cookies and browser storage

• Privacy choices: rose-privacy-consent in local storage remembers your choices for 180 days. The record may remain in storage after it stops being valid.
• Appearance: rose-theme-preference in local storage remembers a chosen theme only with your permission, until you reset it, withdraw permission, or clear site data.
• Likes and comments: the __Host-engagement cookie lasts up to one year. It is created for an engagement action you request after permission, is sent only over HTTPS, and cannot be read by page scripts. After a successful human check, a second cookie, __Host-engagement-verified, remembers verification for 30 minutes across artwork likes, comment likes, and comments. It has the same HTTPS and script-access protections. Further actions do not extend those 30 minutes. Withdrawing engagement permission asks the server to expire both cookies.
• Google analytics cookies: _ga and _ga_* identify visits only after you allow Google analytics cookies. They are configured for this host and a lifetime of up to 90 days. Withdrawal removes the site's Google analytics cookies.
• Google opt-outs: rose-google-analytics-revoked and rose-google-cookies-revoked in session storage protect your choices during reloads and storage failures. They are privacy controls, not visitor identifiers.
• Analytics opt-outs: rose-analytics-revoked and rose-artwork-analytics-revoked in session storage protect your opt-out across reloads in that tab, including when saving a choice fails. They are privacy controls, not tracking IDs, and remain for the tab's browser session or until you explicitly re-enable the corresponding category.

Cloudflare and artwork-viewing analytics do not create analytics cookies. Google analytics cookies require their separate permission. Cloudflare may use security cookies as part of its protections; its privacy policies describe that processing. Turning website analytics off reloads the page to stop the installed beacon. If storage restrictions prevent a safe reload, the page pauses network activity and explains how to proceed. Requests already sent cannot be recalled. Fonts are hosted with the site rather than fetched from Google Fonts.

Contact messages

If you use the contact form, the site sends your name, reply email, and message to her. Resend processes the message for delivery, and the destination inbox follows its owner's retention policy. The site does not store the message body or email address in its application database. It does retain keyed hashes, timestamps, delivery state, and abuse counters. Submission and content guards become eligible for cleanup after 35 days; short-lived attempt counters expire sooner. Quiet systems may retain expired rows until a later request or operator cleanup. See Resend's privacy policy.

Turnstile is loaded only when you ask to begin verification for the protected contact action. Resend and Cloudflare process data under their own policies, and copies in provider systems or the receiving inbox are not controlled by clearing this site's cookies.

Sharing, advertising, and external services

The site does not include advertising pixels or social-network SDKs. Artwork sharing opens the service you choose only after your action. External destinations then apply their own privacy practices.

Why information is used and your rights

Optional preferences, engagement, theme analytics, and Google analytics cookies rely on your consent where consent is the applicable legal basis. Hosting, abuse prevention, moderation, and service integrity support the site's legitimate interests, subject to applicable law. Website, artwork viewing, and Google analytics are used to understand site performance and interest in the artwork, with separate controls to object to each category. Contact information is used to take the steps you request and to protect the service.

Depending on where you live, you may have rights to withdraw consent; access, correct, delete, restrict, or receive certain information; object to some processing; and complain to your local data-protection regulator. A right may have legal limits. Use the contact form to make a request or ask for reconsideration of a response. You can also contact the privacy or consumer-protection regulator where you live. Withdrawing consent does not make earlier processing unlawful.

Cloudflare, Google, and Resend operate internationally and may process data in the United States and other countries, including locations outside your country of residence. Cloudflare distributes the site through its global network. The providers' privacy notices explain their international processing and safeguards.

Changing a choice or requesting deletion

Turning off a category stops future use of that category in this browser. It does not erase an existing public comment, a server-side record, a message already delivered, or a copy someone else saved. Clearing cookies changes the pseudonymous engagement identity and may make an old record harder to locate. Use the contact form for a record request; describe the artwork and interaction without posting private information publicly.