Last updated: June 2026
WhereToBuyFilm.com is a community directory for finding places to buy and develop photographic film. This page explains what data we collect, why, and what we do with it.
WhereToBuyFilm.com is a personal project, not a company. It's maintained by Neven Falica. If you have any questions about this policy, you can reach us through social media or by using our Contact form.
When you visit the site, our server automatically records standard access log data: your IP address, the page you requested, your browser's user agent string, the time of the request, and the HTTP response code. This is standard practice for any web server and is used solely for diagnosing problems and understanding traffic patterns (for example, distinguishing human visitors from automated crawlers).
These logs are retained for 30 days and then deleted.
If you submit a location via the suggestion form, we collect the information you provide: the location name, address, website, and any notes you include. This data is used only to review and potentially add the location to the directory. We don't use it for any other purpose and don't share it with third parties.
If you create a shortlist, the list is stored in your session and identified by a short code in the URL. We don't associate shortlists with any personal identity. Shortlists may be cleared periodically.
We don't have user accounts. We don't use advertising. We don't use Google Analytics or any third-party tracking scripts. We don't set cookies except for the session cookie required for the suggestion form's CSRF protection, which expires when you close your browser.
We are based in the EU. Under GDPR, our legal basis for processing server log data is legitimate interest – we need basic access logs to keep the site running and secure. Suggestion form data is processed on the basis of your consent (you're voluntarily submitting it).
Under GDPR you have the right to access, correct, or request deletion of any personal data we hold about you. Since we don't have user accounts, the only personal data we might hold is in server logs (your IP address) or in a suggestion you submitted.
To exercise any of these rights, send us a message using the Contact form.
The site is hosted on DigitalOcean. Their privacy policy applies to infrastructure-level data handling. We don't use any other third-party services that process visitor data.
If we make significant changes, we'll update the date at the top of this page.