Privacy
What we collect
With your permission, we record page views, language, device category, referring website, search terms and reading interactions. A random session identifier is kept in session storage. This is a count of consenting sessions, not a measure of all readers. We do not store raw IP addresses in the application analytics database.
Your choice
Optional first-party analytics and configured Google Analytics load only after you allow analytics. Change your choice using Privacy choices in the footer. If advertising is enabled, its certified consent platform handles advertising choices separately.
Storage and retention
The website and database are hosted in the United States. Application analytics events are retained for up to 90 days and are visible only to authorised staff. Hosting providers may keep operational access logs under their own retention settings.
Accounts and external services
Editorial accounts use an essential, HttpOnly session cookie that expires after 12 hours. Google Analytics and advertising, when configured and consented to, may process information on their own infrastructure. External museum links have their own privacy policies.
Contact and corrections
Use the editorial contact, when displayed, for access, deletion and correction requests. No reader account is required to browse the journal.