Privacy Policy
Last updated: 26 September 2026.
About this site
Byron David Photography is a personal photography website based in Vancouver, British Columbia, featuring photographs by Byron David and other credited photographers. This policy explains how information is handled when you browse the site, view a password-protected gallery, or contact us. For privacy questions or requests, please use the email address on our Contact page.
Browsing and site security
Our hosting and security services process technical request information such as your IP address, requested address, request time, browser information, and security events to deliver the site, investigate faults, and prevent abuse. WP fail2ban records security events, including unsuccessful login attempts. Cloudflare processes requests that pass through its network for security and content delivery, and may use your approximate country, inferred from your IP address, to decide whether to present a security challenge. These systems are used to operate and protect the site.
Cookies and browser storage
WordPress uses cookies for administrator sign-in and, when you enter a gallery password, to remember access to password-protected content. Cloudflare may set security cookies such as cf_clearance to remember a completed challenge. You can clear or block cookies in your browser, but sign-in, gallery access, or security checks may then stop working. See Cloudflare’s cookie documentation for details.
For authorized editors, our share-image maker remembers the last chosen template in browser local storage. This preference remains until replaced or the browser’s site data is cleared. It is not a visitor advertising identifier. Downloading a share image does not automatically upload it to Instagram or another social network.
Performance and caching
The site uses caching, preloading, and performance optimization to make photographs load efficiently. Optimization Detective can send measurements of the page layout, viewport size, visible images, and loading performance to this site. It uses session storage to avoid repeated submissions and a short-lived IP-derived server key to limit submissions. Session storage is normally cleared when the browser tab or session ends. Measurements are refreshed as the site is used; their freshness period is not a promise that all stored measurements are deleted on that date.
Website analytics
We use Independent Analytics to understand which photographs and pages people visit and how they find this website. It records page visits and their timing, referring websites and campaign information where available, approximate location, device and browser information, and clicks on selected links such as Instagram, email, phone, PDF and ZIP links.
The analytics are processed on our hosting server and stored in this website’s WordPress database. The plugin does not use visitor-tracking cookies. It uses an IP address to estimate location and combines the IP address, browser information and a changing secret value to create a hashed visitor identifier. Raw IP addresses are not stored in the analytics records; separate hosting and security logs may still contain them. We configure the secret value to change daily to limit recognition across days. Logged-in visits are excluded.
Analytics records are scheduled for automatic deletion after two years. Deletion follows the site’s scheduled tasks, and older copies may remain in backups until those backups expire. Analytics are not linked to a visitor account or email address by this setup. Please contact us if you have a question about these records; we may be unable to identify a particular visitor’s records from an email address alone.
Contacting us and editor accounts
If you email us, we receive your email address and whatever information you include, and use it to respond and manage that correspondence. Email is processed by the relevant email providers. Public account registration and visitor comments are not currently offered. Accounts for site editors contain the information needed to administer the site, and WordPress processes authentication and account-recovery information. The public Contact page and photographer credits contain details deliberately supplied for publication.
Photographs and gallery privacy
Photographs, captions, dates, place labels, and camera details may identify people or places. Image files may also contain embedded metadata. Please contact us with the relevant gallery or image address if you have a concern about a photograph of you or information shown with it. We review these requests individually. A gallery password restricts the gallery page; it does not guarantee that a person with a direct image-file address cannot view or share that image.
Service providers and external links
Hosting, email, and security providers process information as needed to provide their services. Some processing may take place outside Canada, including in the United States. Cloudflare describes its processing in its privacy policy. Social-profile links take you to another website, where that provider’s privacy practices apply. This site does not currently use an advertising network or sell visitor information.
How long information is kept
Published photographs and supplied contact details remain until changed or removed. Correspondence is kept as needed to handle the conversation and related requests. Technical logs, security records, cached content, and backups follow the retention and rotation settings of the systems and providers that hold them; these periods are not all the same. Removing content from the current site may not immediately remove copies from backups, caches, or copies saved by other people. Contact us for information about a particular record or a deletion request.
Your choices and requests
You can contact us to ask about information we hold about you, request access or correction, or ask us to remove it. Include enough detail to locate the information; please do not send identity documents unless we agree they are necessary. We may need to verify a request and may retain information where required for legal or legitimate security purposes. WordPress provides export and erasure tools for supported records. Photographs, email correspondence, provider logs, and published credits may need manual review rather than an automatic email-address lookup.
Changes to this policy
We will update this page when the site’s features or information-handling practices change. The date above identifies the latest update.