Privacy

This site is run by Heather, the photographer and writer behind Postcards by Heather. This page explains what happens to information when you visit, and what your choices are.

The short version

• This site sets no cookies and stores nothing in your browser.
• There is no advertising network and no cross-site tracking.
• Nothing is sold, rented or traded. Ever.
• If you email or use the contact form, Heather reads it and replies. That is all it is used for.

The cookies page lists every technology that may run here, whether it is active today, and exactly what each one stores.

What is collected

When you just read

Nothing is asked of you and no account is needed. Like every website, the server that delivers these pages keeps short-lived technical logs, which include your IP address, the page requested, the time, and your browser's user-agent string. These exist to keep the site running and secure, and are not used to build a profile of you.

When you get in touch

The contact page collects only what you type: your name, your email address, optionally a company, and your message. It is used to answer you and to keep a record of the conversation if a working relationship follows. It is not added to a marketing list.

Third parties that see something

Some parts of the site load from other companies' servers. When that happens those companies receive your IP address, because that is unavoidable in fetching a file from them. This is the complete list:

Who	Why	What they receive	When
CARTO and OpenStreetMap	Map tiles on the Destinations pages	IP address and which map tiles were requested	Only on pages that show the map
Cloudflare (cdnjs)	The Leaflet mapping library	IP address and browser details	Only on pages that show the map

Typefaces are served from this domain rather than from Google, deliberately, so that simply reading a page does not hand your IP address to an advertising company.

Links to Instagram are ordinary links. Nothing is embedded, so Instagram learns nothing about you unless you click through, at which point their privacy policy applies.

Where the site is hosted

The site runs on a server in Germany. If you are reading from outside that country, your request necessarily travels there.

How long anything is kept

Server logs are short-lived and rotate automatically. Messages you send are kept as long as they are useful for the conversation or the working relationship they belong to. Ask for yours to be deleted and it will be.

Your rights

Wherever you live, you can ask what is held about you, ask for it to be corrected, ask for it to be deleted, or object to it being used. Write to hello@postcardsbyheather.com and it will be handled.

If you are in the United Kingdom or the European Economic Area, the lawful bases relied on are legitimate interests for keeping the site running and secure, and consent for answering a message you chose to send. You also have the right to complain to your national data protection authority.

If you are in California, note that no personal information is sold or shared for cross-context behavioural advertising, so there is nothing to opt out of.

Children

This site is written for adults and is not directed at children under 13. No information is knowingly collected from them.

Analytics and advertising

Visitor statistics and advertising measurement may be used. Where they are, they are listed on the cookies page with their current status, and none of them load until you have agreed. Rejecting them changes nothing about how the site works for you.

Where a tool sends data outside the United Kingdom or the European Economic Area, that is stated in the same table, so you can see where your data would go before you decide.

If this changes

Anything new appears on the cookies page before it runs, and the date at the top of these pages changes. If the new thing needs your permission, you will be asked again rather than opted in by default.