Privacy

Last updated 7 September 2026

This page explains what happens to information when you open a client gallery. It is written for the galleries themselves, not for the main studio website.

Two ways in, and what each one asks for

You can open a single gallery with the name and password from your delivery email. That route asks for nothing about you — no name, no email address, no account.

Or you can create an account, which keeps all of your galleries in one place. We store your name, email address, a protected password hash, account dates and sign-in records. If you use favourites or request changes, we also store those selections and requests as described below.

How your account information is used

Your name is used to greet you and identify your selections and requests to the studio. Your email address identifies which galleries belong to you and connects your requests to your account. We do not add it to a mailing list and we do not use it for marketing. If the studio ever wants to email you marketing, it has to ask you separately.

Your password is never stored. What we keep is a slow, salted one-way transformation of it (PBKDF2-SHA256), which cannot be turned back into your password. Nobody at the studio can read it.

Accounts can only be created for an email address the studio has already delivered a gallery to. You cannot sign up otherwise.

Staying signed in

When you sign in, a random session token is stored in your browser's local storage so you don't have to sign in on every visit. It expires after 30 days, and signing out deletes it immediately. It is not a tracking cookie and it is not shared with anyone.

Favourites and change requests

Signed-in clients can favourite photos or videos and ask the studio for changes. We store your name and email, the collection and file identifiers and names, and the date of your selection or request. Requests also include the note and optional video timecode you enter, plus whether the studio has read or resolved them. The studio can see this information in its dashboard and export favourite filenames. Other gallery visitors cannot see your requests or selections.

Unstarring a file removes that favourite. Requests remain available as a record of the work, including when resolved. Deleting your account removes your favourites and requests; deleting a collection removes its associated favourites and requests. Removing an original file from Drive does not by itself remove this history.

Invoices

A signed-in client can open their collection's invoice link. That takes you to the external invoice service to review or pay it. This gallery site does not collect your card details. The paid state shown here is maintained by the studio.

What we don't do

No analytics, no advertising trackers, no marketing pixels, and no cookies. We don't log which photos you look at or download, and we don't build a profile of your visit.

Your photos and videos

Your files are stored in Google Drive and shown to you through this site. They are reachable by anyone who has the gallery password or the direct file link, so please share the link only with people you want to see it.

Galleries may have a closing date, after which the link stops working. The original files stay in the studio's own archive.

Services we rely on

Three companies handle data as part of making this site work:

Your rights

Depending on where you live, you may have the right to ask what personal information is held about you, to get a copy, to have it corrected, or to have it deleted. Photographs of you count as personal information, and so do your name and email address. To make a request, or to ask for a gallery to be taken down, email the studio at the address below.

Children

Galleries may contain photographs of children taken with the permission of a parent or guardian. A parent or guardian can ask for those images to be removed at any time.

Retention and deletion

Galleries stay open until their closing date, which is set per client and shown at the top of your gallery. After that the link stops working. To ask for your files to be deleted from the studio's archive, or for a gallery to be closed early, use the contact route below.

Your account is kept while you have galleries with the studio. Ask us and we'll delete it — that removes your account record, favourites and change requests, and signs you out everywhere. Deleting your account does not delete your photos, and deleting your photos does not delete your account, so say which one you want.

Who is responsible

These galleries are operated by Khatagraphy, LLC, based in Louisiana, United States. Contact: admin@khatagraphy.net.

Questions

Email the address above, or reply to your delivery email and it will reach the studio directly.