Updated 5 October 2026. This policy describes the current technical operation. The contact form is open and contract signing is available through private client links. Questions: info@siralstudio.com.
Contact
For personal data questions about Siral Studio, contact info@siralstudio.com.
Scope
This policy explains the technical use of data by the Siral Studio website, private client galleries, electronic contract portal and studio management application. The Data Protection Notice separately explains purposes, legal grounds and rights.
What is visible on the gallery landing page
Anyone who has the private link may see the gallery title or names, the shoot date, the selected cover and up to three small previews before entering the PIN. Other photographs, videos and originals require a PIN session. Shared favourites can be seen by people with access to the gallery. Download records indicate that a request was started; they do not prove the file was fully saved on the device.
Private links and sessions
A strong private link and a four-digit PIN protect gallery access. After a correct PIN is entered, a gallery-specific session cookie with HttpOnly and SameSite attributes is used for up to 12 hours. Expiry, unpublishing or renewing the link may end access. Do not share the link or PIN with people you do not want to access the gallery.
Cookies and local storage
Google Analytics 4 loads on public pages only after explicit permission. It measures page visits, successful enquiry counts and selected link clicks. Form contents, personal contact details and private client links are not sent to Analytics. Advertising features are disabled. Analytics is off by default and can be changed through Cookie preferences in the footer. Your choice is stored for 180 days; user- and event-level Analytics retention is set to 2 months. Google may process this data outside Türkiye. Withdrawing permission stops new measurement; it does not automatically erase data previously sent. Cookies needed for requested services, including gallery and administrator sessions, are explained in the Cookie Policy. Cloudflare Access may use authentication cookies for studio management. Turnstile processes technical signals, including IP address, browser and device information, to prevent abuse of the contact form. The application’s service worker handles installation and notifications; private client records and signed PDFs are not intentionally cached for offline use. The selected interface language is kept in the page URL.
External services and changes
Opening Instagram or another external service makes that service’s own terms apply. Send questions and requests to info@siralstudio.com. Changes to this policy are published on this page.
QR guest photo albums
Guest albums are separate from professional delivery galleries. Each event has its own QR link. People with that link can view and download visible photographs while the album is open. Uploading does not require a name, email address or account. Files and previews, file names, upload times and the sharing acknowledgement version are stored using Cloudflare. Uploaders confirm their right to share and acknowledge visibility within that album; this does not remove the rights of other people pictured. This upload does not grant portfolio or advertising use. Optional studio approval may apply. Upload and access deadlines appear in the album; closing access does not automatically delete files. A gallery-specific HttpOnly/SameSite upload session cookie lasts up to six hours, and Cloudflare Turnstile helps prevent abuse. Originals may retain location and camera metadata. For removal or data requests, contact info@siralstudio.com with the album link and the relevant photo.