Privacy

Iris is a personal project, not a company. It stores what it needs to sign you in and to hold your camera library, and nothing else. There is no advertising, no analytics, no tracking pixels, and nothing is sold or shared for marketing.

• Your email address. It is how you sign in and the only thing required to have an account.
• Your cameras. Whatever you type in: names, makes, models, and the optional details like weight or what each one is good for.
• A display name and handle, if you set them for a public profile.
• Your Anthropic API key, if you add one. It is encrypted before it is stored and is never sent back to your browser; the settings page can only show you the last four characters.
• Sign-in records. Each session stores the IP address and browser user-agent it was created from, so a session can be told apart from another.
• Rate-limiting counters. To stop the sign-in email being used to spam people, Iris counts how often each address has been mailed. That counter is keyed by a one-way digest of the address, not the address itself.

No password, because there is not one. No payment details, because Iris does not take payments. No location beyond the place name you type into the recommendation form, which is used to fetch a forecast and is not kept.

• Anthropic, when you ask for a recommendation or look up a camera's specifications. That request contains your camera details and what you typed about the event. If you have added your own API key, the request is made with it and is subject to your own agreement with Anthropic.
• Resend, which sends your sign-in emails and therefore handles your email address.
• Open-Meteo, which receives the place name and date you enter to return a forecast. It receives nothing that identifies you.
• Neon (database) and Vercel (hosting), which store and serve the data on our behalf.

Nobody else. Nothing is sold.

Your library is private unless you deliberately publish it. If you turn a public profile on, other signed-in Iris members who have the link can see your display name and the cameras you have on the wheel. It is not readable by signed-out visitors, and it is excluded from search engines. Your email address is never shown on it, and turning it off again takes the page down.

There is a Delete account button at the bottom of your cameras. It removes your account, your cameras, your stored API key and your sessions. It is immediate and cannot be undone, and it does not require asking anyone.

Backups held by the database provider may lag by a short period before expiring on their own schedule.

Write to flatts.scg@gmail.com for anything at all, including a copy of your data.