Privacy policy

Public gallery preferences

To restore your display on this device, the browser may remember your chosen gallery layout (large photos or mosaic) and viewer background (light or dark). These settings contain only two appearance choices, without an identity, photograph, filter or browsing history. They stay in your browser and can be removed by clearing this site’s data.

Who handles the data?

Tanguy Dessoly is responsible for the processing described here. To exercise your rights or ask a question, write to tanguy@dessoly.com.

Contact and shoot requests

The photography form collects your contact details and the information you choose to share about your project (intent, participants, location, availability and an indicative budget). The software form collects your name, email address and message. Required fields allow a reply; all other fields are optional.

The information is used only to handle your request and, if you pursue the project, prepare a possible quote. Processing is based on the pre-contractual steps you request, then performance of a contract if a shoot is confirmed. Submitting a form does not subscribe you to marketing.

Forms are sent to Formspree and messages may also arrive by email. Formspree stores submissions in the website’s account. The private client area and publication permissions also use Firebase.

Private gallery activity

To follow up the photographic service and delivery, the photographer can view one summary per recipient: last consultation (grouped in five-minute intervals), last requested download, file or archive name and requested format. A forwarded private link remains attributed to its original recipient. This does not identify the person using the link or confirm that the file was saved on their device.

The last 20 exchanges per photograph (comments, edits, removals and replies) are kept in Firebase for retouch follow-up. This history is limited to the main client and photographer, and is removed during daily cleanup after gallery closure. Private studio notes remain in the photographer’s private record and are not shared with clients. Comments can include a point placed inside the photograph, without geolocation. To highlight corrections, the gallery stores the last version of each photograph viewed by each recipient, without a viewing history. This functional state is deleted when access is removed or the closed gallery is cleaned. Invitations use Microsoft 365. Their message and private link are held in a temporary server queue, then cleared after sending. A queue item older than twenty-four hours is not sent and is removed by daily cleanup.

These last-access and download summaries stay private in Firebase and are deleted after ninety days without activity. This summary stores no browsing history, IP address or device identifier. Contact tanguy@dessoly.com to exercise your rights.

Drafts and session documents

You can request a ZIP of some delivered photographs. This download choice does not change the service selection. Technical metadata and a temporary ZIP are prepared in Firebase without an additional notification. Cache access lasts one hour; files are deleted during on-demand or daily cleanup, with failed deletions retained in a private retry queue. The session welcome, usage tips and photography credit are visible to authorised recipients.

An unsent final comment and its optional image point are kept on your device, in storage scoped to your account and session. The photographer does not receive the draft. It is removed after submission or discard; after thirty days it is ignored and cleared on the next storage access. It does not synchronise across devices. Studio forms also keep draft text and settings on the photographer’s device, separately by account and session, for up to thirty days before cleanup on the next studio visit. These drafts may include typed contact details, notes or payment references; they do not publish content, approve an agreement or make a payment. You can discard it in the viewer or clear the website data in your browser.

Quotes, invoices and session information uploaded by the photographer are stored as PDFs in private Firebase storage. Only the photographer and principal client can download them; other participants cannot access them. Shared files follow the gallery access period and cleanup. Uploading a document does not trigger payment or a subscription.

Publication permissions

The individual release form collects a name, optional email, organisation and role if relevant, publication choices, a typed or drawn signature, and the displayed terms. The server records the date. Channels are not preselected; refusing publication does not affect the agreed photograph. This release does not grant marketing permission.

Publication relies on consent. Evidence is retained on the photographer’s legitimate interest in documenting releases and defending rights. The form states a fixed duration, one year by default. Evidence is kept during that duration then for up to five years, or up to five years after refusal or withdrawal. A daily cleanup deletes expired evidence; unanswered requests are deleted after thirty days.

Records are stored in private Firebase Firestore. The photographer alone can consult the register. Signers can access their own copy with a private link and withdraw online or by email. A drawn or typed signature does not certify identity. The photographer must then remove publications under their control.

The release page does not use audience measurement. Abuse prevention uses daily pseudonymous technical identifiers deleted within forty-eight hours. Hosting logs remain subject to the provider’s retention settings. Application logs do not record names, choices or signatures.

Audience measurement

Google Analytics loads automatically on public pages to measure their audience, without a choice banner. The private client area and publication release forms are excluded. Google signals and advertising personalisation are disabled in the site configuration.

Google may receive navigation data, measurement identifiers, approximate location and device information. The measurement cookie is configured to last no longer than approximately thirteen months.

Google Analytics is disabled in the staging version.

Hosting and transfers

Firebase Hosting serves the pages and may process technical data needed for hosting. Formspree handles requests; Google handles measurement data on public pages. These providers may use infrastructure or subcontractors outside the European Economic Area.

Your rights and your image

You may request access, correction, erasure or restriction of your data, and object to certain processing where applicable. Write to the address above for any request, including the removal of a photograph depicting you.

A response is provided within the applicable time limits. If the disagreement persists, you may complain to the French data protection authority (CNIL). Sending a photography brief does not authorise publication of your image: a separate, specific and recorded release will be requested where needed.