Privacy policy

What is collected

Nothing is collected by your reading the site. There is no sign-up, no newsletter and no analytics. Nobody is counting visitors, and no profile of you is built here.

There is also no cookie, no tracking pixel and no advertising tag anywhere on the site. That is set out in detail in the cookie policy.

The contact form is the only place anything is asked of you, and it asks for the least that makes a reply possible.

The contact form

The form asks for three things: a name, an email address and a message. Nothing about your browsing is recorded alongside what you type — no page history, no device fingerprint, no identifier of any kind.

There is one more field in the page that you will never see: a decoy, left empty by design. Automated scripts fill in every field they find and people cannot fill in one that is not shown to them, which is how the server tells them apart. It collects nothing about you; it exists so that this site does not need a spam service run by somebody else.

It is used for one purpose: to read the enquiry and answer it. The legal basis is legitimate interest — you sent a business enquiry and expect a reply — rather than consent, which means there is no permission to withdraw. You can still ask for the message to be deleted at any time.

The message is emailed straight to the same inbox as any other correspondence. If mail delivery fails, it is written to a file on the server instead, so that an enquiry is not silently lost; that copy is removed once the message has been dealt with.

Nothing about the form involves another company. The spam check runs on our own server, so no third-party service sees your message or your address.

If you write to me

The contact page also lists the email address directly, sofiva.ko@gmail.com, for anyone who would rather not use a form. Either way the message lands in the same ordinary inbox.

That inbox is hosted by Google, so Google processes the message in the same way it processes any email sent to a Gmail address. Their terms govern that part, not this policy.

Correspondence is kept as long as it is useful — an enquiry that leads to work is kept with the project, one that goes nowhere is deleted. It is never added to a mailing list, never used for marketing and never passed to anyone else.

Server logs

The server that delivers these pages records the requests it receives: typically an IP address, the time, the page requested and the browser's user-agent string. Every web server does this, and it is what makes it possible to tell a real fault from an attack.

These logs are not linked to anything else, not used to build any profile of a visitor and not shared. They are kept only as long as they are operationally useful.

Other companies

Films are hosted on YouTube. Until you press play nothing of theirs has loaded; press it and the connection is between your browser and Google, under their policy. The cookie policy explains exactly what that means.

Credits and press mentions link out to Instagram, MUBI, Letterboxd, magazines and festival sites. Those are ordinary links — following one takes you to their site, and their policy applies from that point.

Beyond those, nothing on this site is served by a third party. The typefaces, every photograph and every stylesheet come from this domain.

Your rights

If you are in the UK or the EU, data protection law gives you the right to ask what personal information is held about you, to have it corrected, and to have it deleted. In practice, for this site, that means the messages you have sent, whether through the form or by email — there is nothing else.

Write to sofiva.ko@gmail.com and it will be dealt with. You also have the right to complain to the data protection authority in your country if you are not satisfied with the answer.

Changes

If the site starts collecting anything more — analytics, an embedded service, anything at all beyond the form — this page will say so before it happens, and the date at the top will change with it.