Privacy Policy

Last updated: [August 14, 2025]

1. Introduction

We at Vintage Paparazzi value your privacy. This policy explains what personal information we collect, for what purposes, how we protect it, and what your rights are.

2. Information We Collect

Comments: IP address, browser user agent, and any data you choose to submit. Used for spam prevention.
Profile & Contact: If you register or contact us, your email and name are stored for correspondence.
Cookies:
Comment form saves your name/email/website (1 year)
Login sessions (2 days), screen preferences (1 year), “Remember me” option (2 weeks)
Embedded content (videos, images) may set cookies via third-party providers.
Analytics & Tracking: We use [Google Analytics or alternative], anonymized and opt-out capable, to understand traffic and improve UX.

3. How We Use Information

For spam protection and site security
To respond to your messages or comments
To improve our website performance and user experience
Note: We do not share, sell, or rent your personal data to third parties without consent, except for necessary service providers bound by confidentiality (e.g., hosting, analytics tools).

4. Legal Bases (for EU visitors)

Consent: For cookies and embeds.
Legitimate interest: Spam prevention, site maintenance, user communications.
Legal obligation: If required by law or court order.

5. Data Retention

Comments and metadata are kept indefinitely (for spam control and continuity).
Profile/contact data is kept as long as the account is active or needed for communication.
You can request data deletion or export anytime, except data we must retain for legal reasons.

6. Your Rights (GDPR/CCPA)

Depending on your location, you may:

Request access to, correction, or deletion of your data
Withdraw consent at any time (e.g., disable cookies)
Opt-out of analytics tracking (link/button here)
Lodge a complaint with a supervisory authority, if applicable.

7. Security Measures

All data transmitted over HTTPS.
Regular server and plugin updates.
Limited access to personal data by admins only.

8. Third-Party Embedded Content

Third-party content (e.g., YouTube, social media embeds) may collect data according to their own policies. We recommend reviewing those providers’ privacy guidelines.