The catalogue and your tray
Search terms, family filters, sorting, selected objects and looking notes are processed in your browser. They are not submitted to the site and are not saved to an account. Leaving or reloading the page clears the working tray. A downloaded exhibition note or message draft is a local file under your control.
Preferences on your device
There are no advertising pixels or analytics trackers. If you opt to remember your preferences, localStorage records that choice and your motion setting. Untick the remember option and apply the change to remove those entries, or clear the site’s data through your browser.
Information in correspondence
The contact form sends a name, email address, topic and message to this site’s own handler. A necessary session cookie and security token help protect the form. The cookie uses HttpOnly and SameSite Strict, and is Secure when the handler recognises HTTPS.
When storage succeeds, the message is placed in the site’s inbox with a time and receipt reference. A hash based on the sender’s network address and site path is used to limit repeated submissions. Correspondence does not sign you up for marketing and is not forwarded to an advertising service.
Retention and service records
During submission processing, the handler excludes messages older than 30 days and keeps at most 500 retained records. This does not mean a daily deletion job runs. Hosting logs and backups may follow separate arrangements; no particular storage country or backup period is represented here.
Receipt means successful storage
The form confirms receipt only after the server reports that the message was stored. If that service is unavailable, the page shows an error and retains the draft. Saving a draft to your device is not a successful submission.
Questions and requests
Use the Privacy request topic to ask about information you previously sent, including access or deletion. A receipt reference can help identify a message. Avoid sending sensitive identity documents in the initial note. No guaranteed response period is stated.
Make a privacy request ↗