Privacy Policy
Last updated: October 2026
A personal website by Yechiel Alaluf showing drone photography. It has no ads, tracking or visitor behaviour analytics.
What is stored about visitors
No identifying information. The site only uses functional storage in your browser, with no third party:
- Your language preference (a cookie named NEXT_LOCALE) and your light/dark theme choice (localStorage).
- On private share links: an aggregate view counter, with a short (24 hour) cookie that prevents double counting and holds no personal identifier.
- On password-protected share links: a signed HttpOnly cookie kept for up to 30 days so you are not asked for the password again.
Third-party services
Photos and videos are stored in Google Drive and loaded directly from Google's servers, so Google sees those requests under its own privacy policy. The site is hosted on Vercel and gallery metadata is stored in Google Firestore.
Admin sign-in and Google data
The admin area is restricted to the site owner. The application accesses only the site owner's own Google Drive to manage the gallery files. It does not access visitors' Google data and does not share Google data with third parties.
Security
The site is served over HTTPS only, with a strict Content Security Policy. Access tokens are stored encrypted. Private share links are not indexed by search engines.
Contact and data deletion
For privacy questions or requests: support@yechielalaluf.com