Cornwallis Museum – Privacy Policy

Last updated: September 2026

The Cornwallis Museum is committed to protecting your privacy and handling your personal information with transparency and respect. This policy explains what data we collect, why we collect it, and how it is used.

Our website address is: https://cornwallismuseum.com

1. Information We Collect

We only collect the minimum information required to operate our newsletter, museum archives, and community features.

We collect:

Names (for newsletter and alumni identification)
Email addresses (for newsletter delivery and account recovery)
Photos donated to the museum (for archival and historical preservation)
Comment data (name, email, comment text)
IP address and browser user agent (for spam detection)

We do not sell, trade, or share your personal information.

2. Comments

When visitors leave comments on the site, we collect:

The data shown in the comment form
The visitor’s IP address
Browser user agent string (to help detect spam)

An anonymized string created from your email address may be sent to the Gravatar service to check if you use it. Their privacy policy is available at: https://automattic.com/privacy/

After your comment is approved, your profile image (if using Gravatar) becomes visible publicly.

3. Photo Submissions

If you upload or donate photos to the museum:

Avoid uploading images with embedded EXIF GPS location data
Visitors may be able to download and extract location data from images displayed on the website

Donated photos become part of the museum’s historical archive.

4. Cookies

We use cookies only for essential website functions.

Comment Cookies

If you leave a comment, you may opt‑in to saving your name, email, and website in cookies for convenience. These last one year.

Login Cookies

A temporary cookie checks if your browser accepts cookies when visiting the login page.
Login cookies last two days.
Screen option cookies last one year.
If you select “Remember Me”, your login persists for two weeks.
Logging out removes login cookies.

Editor Cookies

If you edit or publish an article, an additional cookie stores the post ID of the article you edited. It expires after one day.

5. Embedded Content

Articles may include embedded content such as videos, images, or articles from other websites.

Embedded content behaves exactly as if you visited the external site directly. These sites may:

Collect data about you
Use cookies
Include third‑party tracking
Monitor your interaction with embedded content

6. Who We Share Your Data With

If you request a password reset, your IP address will be included in the reset email.

We do not share your data with advertisers, data brokers, or external marketing companies.

7. How Long We Retain Your Data

Comments

Comments and their metadata are retained indefinitely to recognize and approve future comments automatically.

User Accounts

For users who register on our website:

We store the personal information provided in their profile.
Users may view, edit, or delete their information at any time (except usernames).
Administrators can also view and edit this information.