GalleryCamp uses a small number of cookies, all needed to sign in or to remember a setting. We use no advertising cookies and no cross-site trackers, and our analytics set no cookies at all.
This notice also covers tracking that is not done with cookies: what viewing rooms and gallery websites record about their visitors.
Cookies
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
better-auth.session_token (__Secure- prefix on HTTPS) |
GalleryCamp | Keeps you signed in. Strictly necessary. | Until you sign out, or 7 days without use |
better-auth.state and related sign-in cookies |
GalleryCamp | Protects a Google sign-in from forgery. Strictly necessary. | Minutes, while signing in |
sidebar_state |
GalleryCamp | Remembers whether the dashboard sidebar is open. | 7 days |
Stripe cookies (e.g. __stripe_mid, __stripe_sid) |
Stripe | Fraud prevention on card payment pages. Set only on pages where you enter a card. | Up to 1 year |
Browser storage
These are kept in your browser, not sent to us automatically.
| Key | Where | Purpose | Lasts |
|---|---|---|---|
gallerycamp-theme |
Dashboard | Light or dark theme. | Until cleared |
| Navigation state | Dashboard | Which menu sections are expanded. | Until cleared |
gc.room.session |
Viewing rooms | A random id that groups one visit's activity together, used only when the gallery records engagement in that room. | Until the tab is closed |
Analytics
We count page views with Umami, self-hosted at limehosting.com rather than sent to an analytics company. It sets no cookies, stores no IP addresses, and reports visits in aggregate — it cannot follow an individual across pages or sites. It runs on gallerycamp.com, the dashboard and viewing rooms.
What viewing rooms record
A gallery can send a collector a private viewing room. While engagement recording is on — galleries can switch it off per room — the room records which works are opened, time spent on each (counted only while the page is visible), zooms, video plays, document downloads, favourites and inquiries. Each visit records the IP address, browser and referring page. The room says so on the page.
When engagement recording is off, the room records only that the link was opened.
This data belongs to the gallery, which uses GalleryCamp as its processor. See Part 2 of the Privacy Policy.
What gallery websites record
When a gallery website built with GalleryCamp, or connected through the GalleryCamp API, displays an artwork, the view is recorded for the gallery's reporting, with the IP address, browser and referring page. No cookie is set to do this.
Emails sent through GalleryCamp contain no tracking pixels. We do not record whether an email was opened. When GalleryCamp says a collector "opened" a viewing room, it means they opened the room's link.
Embedded content
- YouTube videos in rooms and websites use YouTube's privacy-enhanced mode (
youtube-nocookie.com), which sets no cookies until you play the video. - Gravatar profile images are looked up using a hash of an email address.
Controlling cookies
Strictly necessary cookies cannot be switched off without breaking sign-in. You can clear or block any cookie in your browser settings. Because we use no non-essential cookies, there is no consent banner.
Contact
Questions: hello@gallerycamp.com