Privacy policy

This page explains what personal data andreluu.com collects, why, and what you can do about it. The short version: the site collects only what you type into its forms, uses it only to answer you or to show your comment, and does not sell it, share it for advertising, or track you.

1. Who is responsible

Andre Luu, landscape photographer and owner of andreluu.com, is responsible for your data on this site. For any question or request about your data, write to me through the contact page.

2. What the site does not do

  • No analytics or visitor tracking.
  • No advertising and no advertising cookies.
  • No user accounts and no newsletter.
  • No payments on this site. Prints are sold on Etsy; when you follow a “Buy on Etsy” link, your order and payment are handled by Etsy under Etsy’s own privacy policy.
  • No fonts, maps or other files loaded from outside companies when you open a page.

3. What the site collects, and why

Comments

When you leave a comment, the site stores your name, your email address, your comment, the date and time, your IP address and the name of your browser. Your name and comment are shown publicly under the article. Your email address is never shown. The IP address and browser name are used only to detect spam and abuse.

Contact form

When you write to me through the contact form, the site stores your name, your email address, the subject and your message, and sends them to me by email so that I can answer you. Your IP address is used for one hour, in a coded form, to limit how many messages one address can send; it is not saved with your message.

Phototrip request form

When you ask to join a phototrip, the site stores what you enter: your name, email address, phone number, Facebook name if you give it, the trip, the number of people and your note. I use this only to answer you and to organize the trip.

Server logs

Like every website, the server that hosts this site records each page request: IP address, date and time, the page requested and the name of the browser. These logs are used for security and to fix technical problems.

4. Cookies

The site sets no cookie when you only read it. If you tick “Remember my name and email in this browser for next time” when you comment, a cookie keeps your name and email address in your own browser for about one year, so that you do not have to type them again. You can delete it in your browser at any time.

5. Legal basis

Where the European data protection law (GDPR) applies, I process your data on these grounds:

  • Your request: to answer a contact message, a phototrip request or a question about a print (Article 6(1)(b)).
  • Your consent: the comment cookie, which you choose yourself (Article 6(1)(a)). You can withdraw it at any time by deleting the cookie.
  • My legitimate interest in running a safe website with a useful discussion under each article: publishing comments, spam protection and server logs (Article 6(1)(f)).

6. Who receives your data

Your data is not sold and not passed on for advertising. It is stored on the site’s server at the hosting company Cloudways, which uses DigitalOcean data centers, and messages from the forms reach me through my email provider. These companies process the data only to provide their service. The server may be in a country other than yours, including the United States.

7. How long data is kept

  • Comments stay with the article for as long as the article is online, or until you ask me to delete them.
  • Contact messages and phototrip requests are kept for as long as needed to answer you and to handle the trip, and are then deleted when no longer needed.
  • Server logs are kept for a short time by the hosting company.

8. Your rights

You can ask me at any time to tell you what data I hold about you, to send you a copy, to correct it, or to delete it. You can also object to its use or ask me to restrict it. Write to me through the contact page; I will answer within one month. I may need to confirm that the request really comes from you, for example by replying to the email address used in the comment or message.

If you live in the European Union, the European Economic Area or the United Kingdom, you also have the right to complain to the data protection authority of your country.

You are never required to give any data to read this site. If you do not fill in a form’s required fields, the comment or message simply cannot be sent.

9. No automated decisions, no “Do Not Track” difference

The site makes no automated decisions about you and builds no profile. Because it does not track visitors across websites, it behaves the same whether or not your browser sends a “Do Not Track” signal.

10. Children

This site is written for adults and is not directed at children. I do not knowingly collect data from children under 16. If you believe a child has sent data through a form, tell me and I will delete it.

11. Changes

If the site starts to collect data in a new way, this page is updated first. The version on this page applies from the date shown.

Last updated: November 2026.