Privacy Policy

Contact form: your name, email, subject and message. To stop spam I also store a one-way, scrambled version (a keyed hash) of your IP address. It can't be turned back into your IP.

Accounts: your email address, a display name if you add one, and your password (stored encrypted by my authentication provider). If you sign in with Google, I receive your name, email and Google account ID. I don't get your Google password.

Activity on the Site: collections you save, photos you heart and any notes you add to them.

Payments: the amount, the collection, the date, and the name and email you give at checkout. Card details are collected and processed by Stripe and never reach my servers.

Technical data: my hosting provider keeps standard server logs (such as IP address, browser and pages requested) for security and reliability.

• to reply to your messages and inquiries;
• to run your account, saved collections and photo picks;
• to deliver downloads and process donations and purchases;
• to send emails you'd expect: collection-ready notices, password changes, receipts;
• to prevent spam, fraud and abuse, and keep the Site secure.

I don't sell your personal information, share it for advertising, or use advertising trackers. I don't send marketing emails unless you ask for them.

I use these trusted providers to run the Site. Each only gets what it needs:

• Vercel: website hosting.
• Supabase: database, accounts and photo storage.
• Resend: sending email.
• Stripe: payment processing.
• Google: sign-in, only if you choose "Continue with Google".

I may also disclose information if the law requires it, or to protect the Site and its users.

The Site only uses cookies it needs to work:

• a sign-in cookie that keeps you logged in;
• a short-lived cookie that remembers you unlocked a collection's downloads (about 24 hours);
• cookies Stripe sets during checkout to prevent fraud.

There are no advertising or cross-site tracking cookies.

• Contact messages: up to 2 years, then deleted.
• Account data, saved collections and hearts: until you delete your account.
• Payment records: as long as tax and accounting law requires (typically 7 years).
• Server logs: kept by the hosting provider for a short period.

You can ask to see, correct, export or delete your personal information, or to close your account. Contact me and I'll respond within 30 days. Depending on where you live (for example California, the EU or the UK), you may have additional rights under local law. I'll honour them.

If you appear in a photo and want it removed from public view, see the removal requests section of the Terms.

Data is encrypted in transit, access is restricted, original photos are kept in private storage, and passwords for collections are stored hashed. No system is perfectly secure, but I take reasonable steps to protect your information.

The Site isn't aimed at children under 13, and I don't knowingly collect their personal information. Parents can contact me to have a child's information or photos removed.

If I update this policy, I'll change the effective date above.