Privacy policy

In short

• We collect what we need to run the site: your email address and role, what you post, and your messages.
• Contact details on listings are shown only to signed-in users. Your email address is not shown to other users.
• We don't sell personal information.
• You can ask to see, correct, or delete your information at any time.

What we collect

Account. Your email address and whether you are a museum or a vendor. We don't use passwords.

What you submit. Listings, profiles, gallery images, attachments, and drafts, including any names and contact details you choose to put in them.

Sign-ups. If you leave your email address to be told when a page opens, we keep it and the page you left it on. We use it only to write to you once, when that page opens, and you can ask us to delete it.

Newsletter. If you subscribe in the footer, we keep your email address and when you confirmed it. We email you a link first, and you are not on the list until you click it. We use the address only to send the newsletter, and every email has a link to unsubscribe.

Activity. Messages and responses you send through the site, listings you save, saved searches, and alert settings.

Technical. A sign-in cookie, and basic server logs (such as IP address, browser type, and pages requested) that we use for security and to keep the site running.

Visits. We use Cloudflare Web Analytics to count visits and see which pages are read. It sets no cookies and does not follow you from site to site. It is not loaded on the sign-in and newsletter confirmation pages.

We don't collect payment information. Billing doesn't exist yet.

How we use it

• To run the site: send sign-in links, publish listings after review, and route responses and messages.
• To send alerts you turn on (one digest a day) and notices about your account, your listings, and review decisions.
• To keep the site safe: prevent fraud and abuse, and enforce the Terms and the Posting policy.
• To understand how the site is used, such as how many responses a listing receives, so we can improve it.

What other people can see

Public: published listings and vendor profiles, including the details you put in them.

Signed-in users only: contact names, email addresses, phone numbers, and response instructions that a museum puts on a listing.

Not shown to other users: your sign-in email address. Messages between users go through the site.

Who we share it with

We don't sell personal information. We share it only with service providers that host the site and send email for us, who may use it only to provide those services, and when the law requires it or to protect people from harm. The newsletter list is kept at Brevo, which sends the newsletter for us. Cloudflare serves the site and provides the visit counts.

Cookies and fonts

We use one cookie to keep you signed in. We don't use advertising or tracking cookies.

Pages load fonts from Google Fonts, so your browser contacts Google when a page loads.

How we find people to contact

When we invite a museum or vendor to the site, we use public sources, information people send us directly, and contacts who have agreed to hear from us. We record where each contact came from and whether they opted out. We don't use private third-party lists, exports, or confidential records from other organizations.

Messages we send are relevant, limited, and easy to decline. If you ask us to stop, we stop.

Your choices and rights

• Ask to see, correct, or delete the personal information we hold about you.
• Close your account.
• Turn alerts off on the saved searches page, or use the link in any alert.
• Ask us to stop contacting you.

Email [email protected]. We reply within 30 days. Depending on where you live, you may have additional rights under local law, and we will honor them.

How long we keep it

We keep account information while your account is open. When you ask us to delete it, we delete or de-identify it, except records we need for security, to resolve disputes, or to meet legal duties, such as the log of review decisions. We tell you what we kept.

Security

Sign-in links work once and expire. Contact details are shown only after sign-in. No system is perfectly secure, so we can't promise absolute security.

Children

The site is for working professionals. It isn't directed at anyone under 18.

Changes to this policy

We may update this policy. The effective date at the top shows the current version. If a change is material, we will tell signed-in users by email or on the site before it takes effect.

Contact

Privacy questions and requests: [email protected].