Exhibition privacy & image rights

Heritage Hall is operated by PhotoMatchForensics. Contact details and the general privacy notice are available in the imprint and privacy policy.

Guest submissions

Your email is used privately to clarify your submission. Curators review the supplied text, images and optional certificate. Nothing is published automatically. Approved object text, images, collector credit and an optional collector website become public. A certificate is published only with your separate permission and an additional curator decision. Please redact private addresses, signatures and other personal details before uploading.

Your permission and removal

You confirm that you hold the necessary image and text rights and permit exhibition and editorial adaptation of your submission. You receive a private removal-request link on the confirmation page; no email is sent automatically. Keep this link safe. A confirmed removal request immediately hides the submission and sends it to the curator for deletion. You can also contact PMF to request correction, removal or help with a lost link. Submission data and files remain stored until the curator deletes them; backups may retain earlier copies according to the site's backup policy.

Guestbook

Only the name or pseudonym and message you provide, and the date, appear after approval. Do not include personal contact details. Contact PMF for correction or removal of an entry. Moderators can reject or delete entries.

Statistics and abuse prevention

Exhibit views are counted as daily aggregates without IP addresses, referrers or movement histories. A session prevents repeated counting of the same exhibit on the same UTC day. Do Not Track and Global Privacy Control disable this count. Daily exhibit totals expire after 395 days. Existing museum visitor counts use random session hashes; their deduplication records expire after 90 days. Forms use a daily keyed hash of the requesting IP solely to limit abuse; those records expire after 24 hours and are removed on the next form request. The site's normal server logs and session-cookie policy still apply. QR codes are generated locally without contacting a third-party QR service.

Permission record version: heritage-2026-10-22-v1