Skip to main content

City and Landscape Stock Photos

Privacy policy

Last Updated: October 12, 2026
Effective Date: October 12, 2026

This Privacy Policy is to help you understand how Anshar Images ("we," "us," or "our") collects, uses, processes, and safeguards your personal information when you access and use our website, services, and applications (collectively, the "Services").

Your Privacy Rights

For EU Residents (GDPR): You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You may also withdraw consent at any time and lodge complaints with supervisory authorities.

For California Residents (CCPA): You have the right to know what personal information we collect, delete your personal information, opt-out of sale (we don't sell data), and non-discrimination for exercising your rights.

Contact for Privacy Rights: Use our contact form to exercise your rights or ask privacy questions.

Information We Collect

Direct Registration

When you create an account directly, we collect your name, email address and password. This information is used for account management and service provision. Your Profile page also asks for your country, your interests and how you use photos. These answers are optional.

Social Login Authentication

Facebook Login: We no longer offer sign-in with Facebook. If you signed in with Facebook before, we keep your Facebook user ID with your account until you delete your account.

Google Sign-In: When you sign in with Google, we collect your name, email address, and profile information through Google's OAuth 2.0 API using OpenID Connect. We request minimal scopes ('openid', 'email', 'profile'). Google Privacy Policy

Twitter Login: When you sign in with Twitter, we collect your name, email address, and username through Twitter's OAuth 1.0a API. Twitter Privacy Policy

Social Account Management: You can remove our access at any time in your Google or Twitter (X) account settings. This does not delete your account or the data we keep. To delete them, delete your account. The Delete Account part below says what we keep.

Automatic Information

We automatically collect technical information including IP address, browser type (the User-Agent text your browser sends), the page address, the page you came from, and the time. Our web server writes these into its log for every request. We use the log to keep the website working and to stop abuse. We delete the log each time we update the website. There is no fixed time limit. Copies can stay longer in backups of our server. Our other logs and our error alerts do not contain your IP address. Our login, sign-up, contact and newsletter forms use Cloudflare Turnstile. When one of these pages opens, your browser loads a check from Cloudflare, so Cloudflare gets your IP address. When you send one of these forms, we also send your IP address to Cloudflare. When you are signed in, we do not do this for the contact form. Cloudflare uses it to check that you are not a bot.

Visitor Counting

We estimate how many visitors our website has each day. One visitor means one IP address and one browser (the User-Agent text your browser sends) in one day, in UTC time. We count you only after you click, tap, scroll with a mouse wheel or a touchpad, or press a key on one of our pages. Touching the screen to scroll also counts. Your browser then sends one small request to our server. This request sets no cookie and stores nothing in your browser. Your browser also sends our website's cookies with this request, as with every request to our website. We do not use them to count visitors. We count visitors in this way whether you click Accept or Decline. To count visitors, our server turns your IP address and User-Agent into a code, using a secret key. We do not store your IP address or User-Agent for this count. We make a new key every day. Our cache stops giving out a key when its day ends. The key itself can stay longer in the cache's memory, in the cache's files on our server, and in backups of our server. When counting starts on a new day, we delete the codes of earlier days. Some codes can stay longer, for example when a deletion fails, and are removed by a later deletion. We keep only the number of visitors per day. Our database logs and backups can contain codes, but never the key.

Google Maps

Our Photos page, every country page and every city page load Google Maps when you open the map, or when you open the page in map view. Every photo map page loads Google Maps as soon as it opens. Google then gets your IP address and information about your browser. Your cookie choice does not change this. Google Privacy Policy

How We Use Your Information

We use your information to provide services, personalize your experience, process transactions, send communications (with your consent), and comply with legal obligations.

Data Sharing

We do not sell your personal information. We share it with services that run parts of our website for us, for example Cloudflare for the bot check, and PayPal and Stripe for payments. We share it with anyone else only when the law requires it, to protect our rights, or when you agree.

These services get personal data through our website:

  • DigitalOcean runs our server. The server holds our database, with your account, your orders, your messages to us, your comments and your newsletter subscription. The server also keeps our web server log, which contains your IP address.
  • Cloudflare checks for bots on our login, sign-up, contact and newsletter forms. It gets your IP address.
  • PayPal and Stripe take your payment. They get the names of the photos, the licenses and the prices. Stripe also gets your email address and your customer number on our website.
  • Mailgun delivers our emails. It gets your email address and the text of each email that we send you. It also gets the emails that we send to ourselves about you, for example about your order or your message.
  • Google hosts our own mailbox. It holds the emails that we send to ourselves about you, and the emails that you send us.
  • Telegram delivers notices to us about accounts, orders, newsletter sign-ups, comments and contact messages. A notice can hold your name, your email address, your newsletter choice, and what you bought or wrote.
  • Google Analytics gets data about your visit, but only after you click Accept in the cookie banner.
  • Google Maps gets your IP address when a map loads: on our Photos page, country pages and city pages when you open the map, and on every photo map page. Your cookie choice does not change this.
  • Google and Twitter (X) learn that you use our website when you sign in with them.

Our pages also load files from other services, for example our photos and some program code. These services get your IP address when your browser loads the files.

Payment Processing

We use third-party payment processors (PayPal and Stripe) for transactions. Their data handling is governed by their own privacy policies, not ours. Please review their privacy policies when making purchases.

When you pay, we keep an email address with your order. It is the email address that PayPal or Stripe sends us. If they send none, we may keep the email address of your account instead. We keep your country with your order too, if PayPal or Stripe sends it. We also keep your PayPal payer ID or your Stripe customer ID, with your order and with your account.

Communications from us

We send you the emails that you need for your account and your orders. Examples are the email that confirms your address, a password reset, a notice when someone tries to sign up with your email address, and an order confirmation.

When your account is confirmed, we send you one welcome email. Your account is confirmed when you click the link in our email, or when you sign in with Google or Twitter (X).

We may send a newsletter about new photos and offers. We send it only to people who ask for it. You ask for it when you tick the newsletter box on the sign-up form or on your Account page, or when you subscribe on our Subscribe page. The box on the sign-up form starts unticked. When you subscribe on our Subscribe page, we send you an email to confirm your address. After you confirm it, we send you one welcome email.

We send no other marketing emails.

For the newsletter choice on your account, untick the newsletter box on your Account page and click Update. If you subscribed on our Subscribe page, with or without an account, ask us through our contact form to remove your subscription.

Data Retention

Account Data: We keep your account information until you delete your account. The Delete Account part below says what we keep after that.

Social Login Data: Social authentication tokens are not stored; only basic profile information is retained.

Purchase History: We keep transaction records for at least 7 years, for legal and tax compliance. We do not delete them automatically. We also keep them when you delete your account.

Marketing Data: We keep a subscription from our Subscribe page until you ask us to remove it through our contact form. We can also remove it earlier.

Analytics Data: Google Analytics keeps two kinds of data. Event data is the record of each action on our pages, for example each page you open. Google Analytics keeps it for 14 months. User data is the data linked to the Google Analytics cookie that tells your browser apart from others. Google Analytics keeps it for 14 months after the last activity it records. Each new recorded activity starts that period again. Google deletes data once a month, after its time has passed. These times do not apply to Google's summary reports, which add up the data of all visitors. Google's page about data retention

Cookies and Tracking

Essential Cookies: Required for website functionality, user sessions, and security. Our cookie banner does not turn them off.

Analytics Cookies: We use Google Analytics to understand how our website is used, but only after you click Accept in the cookie banner. Until you accept, our pages do not load Google Analytics. After you accept, Google Analytics gets the address and title of most pages you open, the page you came from, and what you do on our pages. For example, it gets the words you search for and the photos you add to your cart. If the link that brought you to us has campaign tags (utm_source and similar), it also gets these tags. Google Analytics also gets information about your browser and your device. Google works out your approximate place, for example your country and city, from your IP address. We do not attach your account's name, email address or account number to the data that Google Analytics gets. You can change your choice at any time with the Cookie Settings link at the bottom of this page. If you click Decline, Google Analytics stops collecting on that page, and the pages you open after that do not load it. Data recorded in the few seconds before your click may still be sent. Pages of this website that are already open, for example in other tabs, can keep running Google Analytics until you open a new page in them. According to Google, Google Analytics 4 does not log or store IP addresses. Opt out of Google Analytics

Social Login Cookies: Google and Twitter (X) may set cookies when you sign in with them.

Cookie Management: You can control cookies through your browser settings. Disabling cookies may affect website functionality.

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we discover such collection, we will promptly delete the information.

International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for international transfers in compliance with GDPR and other applicable laws.

Security Measures

We implement industry-standard security measures including SSL encryption, secure password hashing (bcrypt), CSRF protection, and regular security updates. We use Cloudflare Turnstile for bot protection and maintain secure hosting infrastructure.

Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you within 72 hours via email and provide details about the incident, affected data, and steps taken to address the breach.

Managing Your Personal Information

Access and Update: You can access and update your personal information by logging into your account.

Delete Account: You can delete your account in your account settings. You cannot undo this. We then delete your comments, likes and favorites. We also delete the user IDs of your Google, Twitter (X) or Facebook sign-in. If you have no orders, we delete everything else in your account too. If you have orders, including unpaid ones, we keep your orders and their invoices for our tax and business records. We also keep the part of your account that they belong to. We remove your name, email address, password and Profile answers from it. Your orders and invoices still hold the email address and the country that we saved with your payment. The messages that you sent us through our contact form stay too. They keep your name and email address. If an email that we send you fails, our system can keep a record of it. The record holds your email address, also after you delete your account. A daily cleanup deletes the record when it is more than 30 days old. Our database also keeps a log of its changes. This log holds the deleted data, and the records of failed emails too. The database keeps each log file for at least 30 days after its last change, and it can keep it longer.

Download Data: You can request a copy of your personal data through our contact form.

Contact Information

Privacy & General Questions: Contact Form
Business Type: Digital-only business operating online