Privacy Policy
Last updated: July 14, 2026
miniaturist is a portfolio and editorial platform showcasing the work of Sabrina Sane, operated by Keating Sane. This policy explains what information we collect when you use our site, how we use it, and the choices you have.
We collect only what is needed to operate the site. We do not sell personal information, run advertising, or share personal information for targeted advertising.
Account Information
When you create an account, we collect your username and email address. If you set a password, we store a salted scrypt hash rather than the password in plain text. If you sign in with Google, we receive your name, email address, profile picture, provider account identifier, and the authentication credentials needed to maintain that connection.
Profile Information
You may optionally upload a profile avatar and customize certain profile settings such as your avatar character and reply-notification preferences. Uploaded images are stored using Vercel Blob storage.
User Content
Comments you post on gallery pieces and blog posts are stored in our database along with your user ID, timestamps, and edit history. Likes on comments are also recorded. Your username, avatar, and comment content may be displayed publicly on the site.
Automatically Collected Information
Our hosting and authentication services may record your IP address, browser or device information, session dates, and pages requested. In production, Vercel Web Analytics and Speed Insights collect page-visit and performance data. Sentry receives diagnostic information when an application error occurs. If you are signed in, an error report may be associated with your account ID, email address, and username so we can investigate the problem.
The site uses a cookie to keep you signed in. Browser storage remembers interface preferences, collapsed sections, recent sign-in display data, and the last public page used for navigation back from the admin area.
- To create and manage your account
- To authenticate your identity when you sign in
- To let you post comments, like comments, and manage your profile
- To display your username and avatar alongside your comments
- To send password reset emails when requested
- To send reply-notification emails if you opt in
- To prevent abuse, enforce site rules, and protect account security
- To diagnose errors, measure performance, and improve the site
We use the following third-party services:
- Vercel: hosting, file storage, and production usage and performance analytics. Subject to Vercel's Privacy Policy.
- Neon: database hosting. Subject to Neon's Privacy Policy.
- Google OAuth: optional sign-in and linked-account authentication. Subject to Google's Privacy Policy.
- Resend: transactional email delivery for password resets and optional reply notifications. Resend receives the recipient address and email content. Subject to Resend's Privacy Policy.
- Sentry: application error monitoring and diagnostic context, including signed-in account identifiers as described above. Subject to Sentry's Privacy Policy.
We use an authentication cookie to create and maintain signed-in sessions. It is necessary for account features and is not used for advertising.
We use local browser storage for the preferences and navigation details described above. You can clear cookies and browser storage through your browser, although doing so will sign you out and reset those preferences. We do not use advertising cookies or build advertising profiles.
Account data is retained while your account exists. Sessions remain until they expire or are revoked. Posted comments and their edit history remain until the comments are deleted. A deleted comment keeps an empty placeholder when needed to preserve a reply thread. Authenticated users can export a copy of their account data or delete their account from profile settings.
Account Deletion
When you delete your account, your email address, username, avatar settings, sign-in credentials (including any linked Google account), and active sessions are removed immediately. Comments you posted remain on the site, shown as "[deleted]" with a default avatar to preserve thread structure. Likes you placed on comments are removed. If you do not want your comment text to remain, delete those comments before deleting your account. Uploaded avatar images are removed from file storage during periodic cleanup.
Records of transactional emails we sent you (such as password resets, delivered via Resend) may persist in the email provider's logs for a limited period outside our systems, and deleted data may remain in our database backups until those age out.
You have the right to:
- Access and update your personal information via your profile settings
- Delete your comments
- Delete your account data; comments remain as [deleted] unless you delete them first
- Request a copy of your personal data
We use access controls, password hashing, limited administrative privileges, and encrypted connections to protect account data. No internet service can guarantee absolute security. Please use a unique password and contact us if you believe your account has been compromised.
This site is intended for a general audience, and accounts are not available to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have done so, we will delete the account and associated personal information. Please contact us if you believe this has occurred.
We may update this policy when the site or its information practices change. The revised policy will be posted here with a new update date. We will provide additional notice when required by law or when a change materially affects how personal information is used.
For questions about this privacy policy or to exercise your data rights, please contact Keating Sane at keatingsane509@gmail.com.