C.A.T.I. Privacy Notice

Data collected from site views

When pages load, public_html/home/db_insert/view_insert.php logs lightweight analytics so we can understand overall traffic.

• Session cookie identifier (PHPSESSID).
• IP address and derived region, country, and continent.
• Daily view counts tied to a page or camera.
• A serialized geo payload with the above location data.

Google Analytics

Public pages load Google Analytics 4, using the existing Vandelay Sound web stream. The site hostname separates C.A.T.I. traffic from the rest of that stream. We use it to count page views (including which camera page was viewed) and clicks on outbound links. Admin pages are not included.

Google may receive your IP address, the page address (sign-in tokens are removed first), and the link you clicked, and may set analytics cookies such as _ga. We use this for site measurement, not for advertising or to build an advertising profile. See the cookie policy.

Data collected from API requests

If you submit the API request form in public_html/home/api-help.php, we collect the details you provide.

• Return email address.
• Name and organization (if supplied).
• Notes or request details.

Data collected for member accounts

If you sign in to share field photos we keep:

• Your email address, display name and optional Instagram handle (the name and handle are shown publicly next to your photos).
• Sign-in timestamps and the IP address used, one-time sign-in links (stored only as a hash, valid for 15 minutes) and long-lived sign-in tokens (stored as a hash, valid for 30 days).

Data collected with field photos

• The photo itself. We re-encode every upload, which removes camera metadata including GPS location before it is stored.
• Your caption, the camera it belongs to, the upload IP address, the time you confirmed the licence and the Terms version you agreed to.
• The moderation decision, its reason if declined, and which administrator made it.

Purpose of collection

We use this information to provide basic site analytics, measure view counts, and respond to API access requests. Google Analytics, described above, is used for the same kind of measurement. We do not use it for advertising or user profiling.

Data sharing, ownership, and retention

We do not sell your data. Data is retained only as long as necessary for site operations.

Retention and your choices

• Sign-in links are purged 24 hours after they are issued; long-lived sign-in tokens expire after 30 days or when you sign out.
• Files for declined or removed photos are deleted at once; the record of the decision is kept for audit.
• Account data is kept until you ask us to delete it.

You can change your credit line and remove your photos from your account page at any time. To delete your account, or to ask a question about your data, email [email protected] from the address you signed in with.

Cookies & preferences

Review cookie settings and read the list of cookies we use.