Who runs it
Museaal.ee is an independent catalogue, run privately: not by a museum, a gallery or an auction house. Questions, corrections and requests about your data: info@museaal.ee.
Browsing
You can use the whole catalogue without an account. Museaal itself sets no cookies. My List, a sign-in and the light or dark setting are kept in your browser's own storage, on your device, until you clear it or sign out.
Visits are counted with GoatCounter, without cookies. Like any server it sees your IP address and browser, but it keeps no personal data: which page was seen, not by whom. A sign-in link sent and a sign-in are counted the same way.
Museum pictures are shown straight from MuIS and the Art Museum of Estonia, gallery pictures from the gallery's own server: those servers see your browser's request, as with any web page. The site itself, fonts included, is served by GitHub Pages.
Accounts
An account is only for having My List on all your devices. We keep your email address and your list in Cloudflare's storage (Workers KV) until you delete the account, or until the list has gone unchanged for two years. The address is used only to send you sign-in links, and the news emails below if you ask for them.
A sign-in link works once, for 15 minutes; a sign-in lasts a year on that device, or until you sign out. Accounts made before 15 October 2026 kept no address; theirs is kept from the next sign-in.
News emails
Only if you ask: tick the box when you sign in and open the link we send, or turn them on from your account page. Every one carries an unsubscribe link, and you can stop them any time, there or on your account page. Until you stop them or delete your account we keep your address, your language and when you said yes.
The Buy Art assistant and art by mood
What you type to the Buy Art assistant, with the works on My List, and the words you type on the mood page are sent to Claude, Anthropic's AI model, to answer. Museaal does not keep them; it counts only how many there were each day.
Who handles it for us
Cloudflare runs the part that answers (a Worker), holds the accounts (Workers KV) and checks that you are not a robot (Turnstile) before an email is sent or the assistant answers. Resend sends the emails, from its EU region. Anthropic answers the assistant and the mood page. GoatCounter counts the visits.
Each keeps its own records, such as server logs and Resend's log of emails sent, under its own terms: Cloudflare, Anthropic, Resend, GitHub, GoatCounter. Museaal not keeping your messages to the assistant does not change how long Anthropic keeps them.
Why we may do this
Accounts, sign-in links and sending what you type to Claude: to give you the service you asked for (GDPR article 6(1)(b)). News emails: your consent (article 6(1)(a)), which you can withdraw any time by unsubscribing. Counting visits and the robot check: our legitimate interest in knowing how the site is used and keeping it free of abuse (article 6(1)(f)).
Outside the EU
Cloudflare, Anthropic, Resend and GitHub are US companies, so what they handle can be processed in the US or elsewhere outside the EU. Resend sends our emails from Ireland. Such transfers rest on the EU–US Data Privacy Framework or the EU's standard contractual clauses, as each provider's terms set out.
Your rights
You can see, correct or delete your data. Your account page shows your address; Delete account there removes the address, our copy of the list and the news emails at once. Or write to info@museaal.ee. You can also ask us to restrict or stop using your data, or to send you your address and list as a file, and withdraw your consent to the news emails at any time. Which of these apply depends on the reason above.
If you think we handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).