Privacy Policy

Raphael Rossi is the data controller for viewingroom.studio. Publication director: Raphael Rossi.

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. You can reach us at contact@viewingroom.studio.

• Identity. Your email address and name, handled by our authentication provider. We never see or store your password.
• Subscription. Card details are entered on Stripe’s own checkout page and never reach our servers. We store a Stripe customer identifier, your current plan, and the date your free trial started.
• What you create. The images you upload, the artwork details you enter (title, artist, year, medium, dimensions, price), your gallery name, address and contact details, and the introduction text of each viewing room.
• Recipients you enter. When you personalise a viewing room, the recipient’s name and email address are stored with it and used to send the link.

We process this to provide the service you subscribed to, and to charge you — in legal terms, performance of our contract with you.

You do not need an account to open a viewing room, and we do not ask you to identify yourself. Two things are recorded:

• A view count. Opening a room increments a counter so the sender knows their selection was seen. We store a number, not a profile: no identifier of yours is attached to it. A cookie lasting six hours prevents the same visit from being counted repeatedly.
• An enquiry, only if you send one. If you use the enquiry form, the name, email address and message you submit are stored and forwarded to the sender, so they can reply to you.

The sender chose to share the selection with you; our legitimate interest is limited to delivering it and letting them know it was opened. If you would rather we deleted an enquiry you sent, write to contact@viewingroom.studio.

This is optional, and nothing happens unless you click the button.

• For Google Drive we request the drive.file scope, which grants access only to the files you explicitly pick in Google’s own dialog — never to the rest of your Drive. The authorisation is short-lived, used once to download those files, and never stored.
• For Dropbox, the chooser returns a temporary link to the files you select. We never hold Dropbox credentials.
• Imported images are copied into your account so your viewing rooms keep working if the original is later moved or deleted. We do not read, retain or share any other data from these accounts, and we do not use it for advertising or to train models.

Uploading and sending are rate limited to prevent abuse. To count usage without keeping your IP address, we hash it with a secret salt and store only the resulting fingerprint alongside a counter, for thirty days. The IP address itself is not written to our database.

Our host and our audience measurement tool collect standard technical logs. We do not use advertising cookies and we do not sell data.

• Session cookies, set by our authentication provider, keep you signed in. Strictly necessary.
• A view-deduplication cookie (six hours) so one visit to a viewing room is not counted several times.

Both are necessary for the service to function, so no consent banner is required. We set no advertising or profiling cookies.

We rely on the following providers, each acting on our instructions. Some are located outside the European Union, in which case transfers rest on the European Commission’s standard contractual clauses.

• Clerk — accounts and authentication
• Stripe — payments and subscriptions
• Sanity — storage of images and viewing room content
• Resend — sending viewing rooms and enquiry notifications
• Vercel — hosting and audience measurement
• Google and Dropbox — only if you choose to import from them

• Viewing rooms stop being viewable thirty days after publication. Their content stays in our storage after that and is removed on request — there is no automatic deletion today, and we would rather say so than imply otherwise.
• Account data is kept while your account exists.
• Anti-abuse counters expire after thirty days.
• Invoices are kept for ten years, as accounting law requires.

You may request access to your data, correction, deletion, restriction, portability, or object to processing. Write to contact@viewingroom.studio and we will answer within one month. These requests are handled manually.

If our answer does not satisfy you, you may lodge a complaint with the CNIL (cnil.fr) or your local supervisory authority.

Traffic is encrypted in transit. Access to viewing rooms relies on an unguessable link containing 128 bits of randomness. Payment details never transit through our servers. No system is perfectly secure, and we will notify you and the relevant authority if a breach affecting you occurs.

We will update this page when our processing changes, and revise the date at the top. Significant changes will be announced by email to account holders.