Privacy Policy

miniaturist is a portfolio and editorial platform showcasing the work of Sabrina Sane, operated by Keating Sane. This policy explains what information we collect when you use our site, how we use it, and the choices you have.

We collect only what is necessary to provide the site's features. We do not sell your personal information.

Account Information

When you create an account, we collect your username, email address, and password if you choose to set one. Passwords are hashed using scrypt and are never stored in plain text. If you sign in with Google, we receive your name, email address, and profile picture from Google.

Profile Information

You may optionally upload a profile avatar and customize certain profile settings such as your avatar character and reply-notification preferences. Uploaded images are stored using Vercel Blob storage.

User Content

Comments you post on gallery pieces and blog posts are stored in our database along with your user ID, timestamps, and edit history. Likes on comments are also recorded. Your username, avatar, and comment content may be displayed publicly on the site.

Automatically Collected Information

When you visit the site, our hosting provider (Vercel) may collect standard server logs including your IP address, browser type, and pages visited. We use cookies for session management to keep you signed in, and the site stores your theme preference locally in your browser. If enabled, we also use Vercel Web Analytics, Vercel Speed Insights, and Sentry to understand site usage, performance, and operational errors.

• To create and manage your account
• To authenticate your identity when you sign in
• To let you post comments, like comments, and manage your profile
• To display your username and avatar alongside your comments
• To send password reset emails when requested
• To send reply-notification emails if you opt in
• To maintain and improve the site

We use the following third-party services:

• Vercel— hosting, file storage, and optional usage/performance analytics. Subject to Vercel's Privacy Policy.
• Neon— database hosting. Subject to Neon's Privacy Policy.
• Google OAuth — optional sign-in. Subject to Google's Privacy Policy.
• Resend— transactional email delivery for password resets and optional reply notifications. Subject to Resend's Privacy Policy.
• Sentry— optional application error monitoring. Subject to Sentry's Privacy Policy.

We use a session cookie to keep you signed in. This cookie is strictly necessary for authentication and is not used for advertising. The cookie is prefixed with miniaturist and Better Auth may cache session state for up to 5 minutes for performance.

We do not use advertising cookies. If enabled, Vercel Web Analytics, Vercel Speed Insights, and Sentry may process technical usage and error data, but they are not used to build advertising profiles.

Your account data is retained as long as your account exists. Comments you delete are soft-deleted (the content is removed but a placeholder remains to preserve thread structure). You may also delete your own account from the site, and authenticated users can export a copy of their account data.

Account Deletion

When you delete your account, your email address, username, avatar settings, sign-in credentials (including any linked Google account), and active sessions are removed immediately. Comments you posted remain on the site, shown as "[deleted]" with a default avatar to preserve thread structure — if you prefer they not remain, delete your comments before deleting your account. Uploaded avatar images are removed from file storage during periodic cleanup.

Records of transactional emails we sent you (such as password resets, delivered via Resend) may persist in the email provider's logs for a limited period outside our systems, and deleted data may remain in our database backups until those age out.

You have the right to:

• Access and update your personal information via your profile settings
• Delete your comments
• Delete your account data; comments remain as [deleted] unless you delete them first
• Request a copy of your personal data

This site is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance of the revised policy.

For questions about this privacy policy or to exercise your data rights, please contact Keating Sane at keatingsane509@gmail.com.