Privacy

Social accounts and imported content

When connected through Meta authorization, owner access tokens are encrypted in server storage. This website never asks for an Instagram or Facebook password. Imported photos, captions and links may be displayed on the public website according to Lana’s visibility choices. Hiding an import or disconnecting an account changes this website; it does not change the original social post.

Visitor participation and browser cookie

Participation uses a Secure, HttpOnly, SameSite browser cookie that identifies a visitor session. Its maximum lifetime is 400 days and it can be renewed as it approaches expiry. Keep the same valid browser cookie to manage your own contributions; it is not an email or social account login.

Visitors can edit their own photo caption, comment or idea text during the first five minutes after submission. Edits return for moderation. Visitors can delete their own contributions later while the same valid browser session is available. Clearing cookies, changing browsers or losing the session can remove that self-service access.

Uploads, moderation and display duration

Visitor photos, comments and ideas await owner moderation before publication. Submitted text and uploaded media are stored to provide these features. Uploaded media remains in storage until it is removed; a story’s display expiry hides it from the public website and does not automatically delete the file.

Abuse prevention and deletion records

The server processes network addresses to limit abusive requests. Persistent quota records use hashes of network addresses; short-term burst checks can use the address in bounded server memory. Deletion markers and quota records can remain after content is removed to enforce ownership, prevent stale changes and protect the service.

Questions or lost access

For a website content or data request, contact Lana through her public Instagram profile. Do not send passwords or access tokens.