Private-first archive
Original photos and videos belong inside the delegate archive by default. Public material should be deliberately curated, low-risk, and reversible.
Archive discretion
Privacy & data use
The Museum of ICOM balances nostalgia with discretion. Every system decision should favour delegate consent, private originals, auditable curation, and reversible publication.
Role-gated access
Supabase profile roles govern who can view, upload, curate, and administer archive content. Public visitors should never see private originals.
Consent over spectacle
The museum is a shrine, not a content mill. Curators can unpublish, redact, or remove material when a delegate asks for it.
How the archive handles data
Media uploads
Delegate uploads go through Supabase-backed records and private storage paths before anything is promoted to a public facade.
Storage
Originals, derivatives, avatars, and public-lowres assets are separate concerns with different visibility rules.
Delegates
Profiles should store only what the archive needs: identity, role, attendance, upload ownership, and curation history.
Need the Secretariat?
Email [email protected] for export, deletion, or redaction requests. Future milestones should add secure self-service tools for delegates and curators.