Privacy Policy
Effective: August 10, 2026
Sepiary is a free, browser-based app that creates instant-film-style photos using your device camera. This page explains what data is collected, who processes it, and the choices you have.
Some sections below describe advertising. Sepiary does not display ads today. Those disclosures are published in advance, and are written to apply only when advertising is enabled — so that the terms are public before anything changes.
Your Camera & Photos
Your camera feed is processed entirely inside your browser. No video, frames, or photos are ever uploaded to our servers or any third party. Photos are saved directly to your device at the moment you take them.
Analytics
We use Vercel Analytics to understand how visitors use this site. It may collect:
- Pages visited and referrer (how you arrived)
- Device type, operating system, and browser
- General geographic region (country level)
No personally identifiable information is collected, and Vercel Analytics does not set tracking cookies. Data is processed by Vercel — see Vercel's Privacy Policy.
We also measure how the app itself is used — for example, when a photo is captured or downloaded — so we can see which features help visitors and improve them. These usage events are stored in our own database, hosted by Supabase, together with: the page you are on, any campaign parameters if you arrived via a shared link, a randomly generated session identifier, and your browser's user-agent string. This data is pseudonymous: it is never linked to your name, email address, account, or photos, and it cannot be used to identify you personally. Rows are automatically deleted after about 90 days, and we only ever read the data in aggregate. We process it on the basis of our legitimate interest in understanding and improving a free product. Because the rows carry no link to any person, individual deletion requests cannot be matched to them — the automatic expiry above applies to everyone equally.
Performance Monitoring
We use Vercel Speed Insights to measure Core Web Vitals (page load time, responsiveness, layout stability). This data is anonymous and aggregated. No PII is collected.
Google Fonts
This site loads fonts (Caveat, Fraunces) from Google Fonts. When your browser fetches these fonts, Google's servers receive your IP address as part of a standard HTTPS request. See Google's Privacy Policy.
Advertising
Current status: no ads are served on this site. No advertising script, ad slot, or advertising cookie is loaded on any page at this time.
When advertising is enabled, we intend to use Google AdSense on our editorial pages only — the blog and the about page. The camera app will stay ad-free. At that point the following will apply:
- Third-party vendors, including Google, use cookies and similar device identifiers to serve ads.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.
- Vendors may also use these technologies to measure ad performance, detect invalid traffic, and limit how many times you see the same ad.
- We never share your photos, camera feed, or email address with any advertising vendor — those never leave your device (photos) or our inbox (email).
- Ads are not shown to visitors we can identify as children, and we do not knowingly collect data from children under 13 (under 16 in the EEA/UK).
You can opt out of personalised advertising by Google at any time via Google My Ad Center, and read how Google uses advertising data in Google's advertising technologies policy and its policy for sites that use Google services. To opt out of many third-party vendors' use of cookies for personalised advertising, visit aboutads.info, the NAI opt-out page, or, in Europe, Your Online Choices.
Advertising Vendors
The table below lists the advertising vendors we plan to use. All of them are inactive today.
| Vendor | Role | Data used | Their policy |
|---|---|---|---|
| Google AdSense (Google Ireland Ltd. / Google LLC) | Ad selection, delivery, and measurement — inactive | Advertising cookies and device identifiers, IP address, browser and device information, pages viewed on this site | Ad technologies |
| Google Funding Choices (consent management) | Presents the consent dialog and records your choice — inactive | Your consent choice, stored on your device; country derived from IP | Google Privacy Policy |
| Third-party ad partners bidding via AdSense | Ad selection and measurement — inactive | Cookies and identifiers as declared by each vendor in the consent dialog | Google's ad technology providers |
Cookies & Similar Technologies
We keep cookie use to the minimum needed. Today, this site sets no advertising or cross-site tracking cookies. The categories that can apply are:
| Category | Set by | Status |
|---|---|---|
| Strictly necessary (site delivery, security, your saved preferences) | Sepiary / our hosting provider | Active |
| Analytics | Vercel Analytics; Sepiary usage-analytics events (stored in our Supabase-hosted database) | Active, cookieless — no cookies are set by either; our usage events are deleted automatically after ~90 days |
| Advertising and ad measurement | Google and its ad partners | Not set — only when advertising is enabled, and in the EEA, UK, and Switzerland only with your consent |
| Consent record | Google Funding Choices | Not set — only when advertising is enabled |
You can block or delete cookies in your browser settings at any time. Blocking advertising cookies does not remove ads — it means any ads you see are non-personalised.
Your Consent Choices
Before any personalised ads are served to visitors in the European Economic Area, the United Kingdom, or Switzerland, we will show a consent dialog through a Google-certified consent management platform implementing IAB TCF v2.2. It will appear before advertising cookies are set, and it will let you accept, refuse, or choose per purpose and per vendor. If you refuse, you will see non-personalised ads or no ads — never a degraded version of the app.
Once the dialog is live you will be able to change or withdraw your choice at any time from the privacy settings link in the site footer. Elsewhere in the world you can use the vendor opt-out links in the Advertising section above. If you are in a US state with an opt-out right, you may also enable the Global Privacy Control signal in your browser, which we honour where it applies; we do not sell personal information for money.
Affiliate Links & Endorsements
Some of our articles recommend instant cameras, film, and accessories. Where an article contains an affiliate link — a link that may earn us a small commission if you buy through it, at no extra cost to you — we follow these rules, consistent with the US Federal Trade Commission's Endorsement Guides (16 CFR Part 255):
- A clear, plain-language disclosure appears at the top of that article, before the first such link — never buried at the bottom of the page.
- The link is marked as a sponsored link in the page's HTML (rel="sponsored"), so it is identifiable as commercial by browsers and search engines.
- Commissions never influence which products we recommend, what we say about them, or the order we list them in. We decide the recommendation first and look for a link second.
- No manufacturer or retailer pays us to feature their gear, gives us free products to review, or sees our articles before publication. Any sponsored or gifted-product content would be labelled as such.
- An article with no disclosure at the top contains no affiliate or sponsored links.
Advertising, if enabled, is kept separate from editorial content: ads are supplied by Google's network, we do not choose which advertisers appear, and an advertiser appearing on a page is never an endorsement by us.
Third-Party Services Summary
| Service | Purpose | Data collected |
|---|---|---|
| Vercel Analytics | Usage analytics | Page views, device info, country |
| Vercel Speed Insights | Performance metrics | Core Web Vitals (anonymous) |
| Google Fonts | Typography | IP address (font request) |
| Google AdSense | Advertising — not active | When enabled: advertising cookies and device identifiers, IP address, pages viewed |
| Google Funding Choices | Consent management — not active | When enabled: your consent choice, country |
Data Retention
Analytics data is retained by Vercel per their own policies. We do not store or control this data directly. If advertising is enabled, advertising and consent data is retained by Google and its partners under their own policies and retention periods; we receive only aggregate performance reports and have no access to raw ad-serving records.
Your Rights
Depending on where you live, you may have the right to access, correct, delete, or port personal data held about you, to object to processing, and to withdraw consent. Because we do not operate accounts or store personal data on our own servers for this app, most requests are best directed to the relevant processor above — but write to us and we will help you find the right route.
Changes to This Policy
If we make material changes — including switching advertising on — we will update the effective date above and revise the relevant sections before the change takes effect.
Contact
Questions about this policy? Email us at zodiarkm@gmail.com or open an issue on our GitHub repository.