Exposing.ai is an independent and academic art and research project focused on the origins and ethics of image datasets used for machine learning and artificial intelligence systems. By accessing the Exposing.ai website (the “Site”) you agree to the terms and conditions set forth in this privacy notice (“Privacy Notice”).

Adam Harvey and Jules LaPlace, in conjunction with Surveillance Technology Oversight Project (“STOP”) have made possible the availability of the Exposing.ai.

For the purposes of this Privacy Notice, Adam Harvey and STOP (collectively, “we,” “our,” “us”) are responsible for the processing of your personal information in connection with the provision of the services on the Site and the Exposing.ai Project (together, the “Services) and will act as joint controllers for the processing thereof.

This Privacy Notice represents our commitment to your right to privacy, giving you a clear explanation about how we use your information and your rights over that information. The Site has been designed to minimize the amount of network requests to third-party services and therefore prioritize the privacy of the viewer.


In order to provide certain features of the Site, certain third-party services are needed. Currently, the Site uses 1 third-party services: (1) Digital Ocean Spaces as a content delivery network. This service encrypts your requests to their server using HTTPS and does not store any cookies or authentication. However, this service may store files in your web browser's local cache (local storage) to improve loading performance. None of these local storage files are used for analytics, tracking, or any similar purpose.


The Site contains many links to third-party websites. The Site has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party web sites or services. You acknowledge and agree that the Site (and its creators) shall not be responsible or liable, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with use of or reliance on any such content, goods or services available on or through any such web sites or services.

We advise you to read the terms and conditions and privacy policies of any third-party web sites or services that you visit.


When you access the Site, we record your visit to the site in a server log file for the sole purposes of maintaining site security and preventing misuse. This includes your IP address and the header information sent by your web browser which includes the User Agent, referrer, and the requested page on our site.

When you use the Exposing.ai Project, we may receive the following information provided by you, which may be used to identify you directly or indirectly: a Flickr URL, your Flickr-generated unique ID (NSID), your Flickr “path alias”, your Flickr username, a Flickr Photo ID or any user-generated tags you have added to Flickr photos. We do not store this information.


We use technical information collected from you to maintain the security of the Site and to prevent misuse. The legal basis for this processing is our legitimate interest to provide you with secure access to and use of the site and to prevent activities which could harm you and us. It is also in your interest if the Site is secure.

If you seek to use the Exposing.ai Project, we may also use certain personal data provided by you with your consent for the purposes of providing you with access to the Exposing.ai Project, which is necessary to fulfill our contractual duties and rights agreed upon with you.


We do not share or make public any information about individual site visitors, unless where required by law to the extent that server logs are only retained for a limited duration.

We do not share any information provided by you in connection with the Exposing.ai Project with any third parties.

In certain circumstances, we may be required to disclose or share your personal data – which is limited to your IP address and web browser information temporarily recorded in our server log for security purposes – in order to comply with a legal or regulatory obligation (for example, we may be required to disclose personal data to the police, regulators, government agencies or to judicial or administrative authorities).


Under applicable laws, you have the right to access, rectify, port, and erase your personal data, as well as the right to restrict and object to certain processing of your personal data. This includes:

To the extent required by applicable data protection law, you may exercise any of your rights at any time by contacting us at .


Retention of your personal data will only ever be temporary and we only retain your personal data until it is no longer necessary to serve the purposes for which it was collected, e.g., for the proper use and functionality of our Site, to provide you with information through the Exposing.ai Project, or for as long as we have a legitimate interest in retaining the personal data unless such interest is overridden by your interests or fundamental rights or freedoms that require protection of personal data and to the extent permitted by applicable laws. This is a case-by-case determination that depends on factors such as the categories of the personal data, nature of the personal data, why it is collected and processed, and relevant legal retention needs.

When we no longer need to use personal data, we will remove it from our systems and records and/or take steps to anonymize it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject)


Your personal data will not be transferred to any third parties or international organizations operating outside of the EEA.


Do Not Track (“DNT”) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third-parties. We do not use tracking technologies therefore DNT has no effect on your visit to this site.


We have implemented appropriate technical and organizational measures to hold your personal data securely in electronic and physical form to protect it from unauthorized access, improper use or disclosure, unauthorized modification, or unlawful destruction or accidental loss.


We reserve the right, at our sole discretion, to modify or replace this Privacy Notice at any time. If we decide to change this Privacy Notice we will post an alert on the Site.


If you wish to contact us or withdraw or change personal information you shared with us previously, you may contact us in the following ways:

If you believe we have not complied with applicable EU data protection laws, you may also contact the relevant supervisory authority in your respective jurisdiction. A list of these supervisory authorities and their contact information can be found at https://edpb.europa.eu/about-edpb/board/members_en.