Frequently Asked Questions

Hosted image galleries you manage from a dashboard and pull into any website over a REST API. You upload once; your sites fetch the images as JSON and serve them from a CDN. There is no gallery backend for you to build, host, or keep running.

No. The Free plan is permanent and needs no card — 1 site, 1 gallery, 10 images and 250MB of storage, with full API access at 100 requests per minute.

Sign in with Google or GitHub from the sign-in page. Your account is created automatically the first time you sign in, so there is no separate registration step.

There is no email-and-password option. We never receive or store a password, which also means there is no password to reset or leak — account recovery happens through Google or GitHub.

Yes. Generate a temporary upload link for any gallery and share it. You choose how long it lives (1, 3, or 12 hours), how many images it accepts (up to 50, and never more than your plan's per-gallery limit), and optionally protect it with a passcode. Every one of those caps is enforced on our servers, not in the page, so the link cannot be reused past its budget.

Every paid plan starts with a 14-day free trial, available once per account. If you have not added a payment method by the time it ends, the subscription simply cancels and you return to the Free plan — you are never charged by surprise.

All of it happens in the Stripe billing portal, reachable from your profile. Cancellation takes effect at the end of the billing period you have already paid for, and you keep full access until then.

Stripe retries the charge and we email you. Your plan keeps working throughout a 7-day grace period, so a card that expires over a weekend will not take your galleries offline. If payment still has not gone through after that, the account reverts to Free plan limits. Nothing is deleted.

We do not provide pro-rated refunds for partial months, except where required by law. Because cancelling leaves your access running until the end of the period you already paid for, there is usually nothing to refund. See the Terms of Service for the full wording.

Nothing is deleted. Limits are checked when you create something new, so if you are over the lower plan's limits you keep everything you already have — you just cannot add more until you are back under them or you upgrade again.

JPG, JPEG and PNG, up to 10MB per file. Your plan's total storage allowance applies across your whole account, from 250MB on Free up to 500GB on Agency.

Yes. Images are served from a public content delivery network so they can be embedded in your sites, which means anyone who has the URL can view them. Please do not upload anything that needs to stay confidential.

Not today. Images are stored and delivered exactly as you upload them — no compression, no resizing, and no format conversion. If file size matters for your site, optimise before uploading. We would rather tell you this plainly than imply a pipeline that does not exist.

The upload is rejected with a message naming the limit you hit, and nothing you already have is touched or removed. Delete what you no longer need, or move up a plan.

Send your key in an x-api-key header. Each site has its own key, so revoking one site's key never affects another.

Limits are per site key, counted in fixed one-minute windows:

• Free — 100 requests per minute
• Developer — 500 requests per minute
• Professional — 2,000 requests per minute
• Agency — 10,000 requests per minute

Go over and you get a 429 with a Retry-After header telling you how many seconds until the window resets. Every successful response also carries X-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset so you can back off before you get there.

Yes. Cross-origin requests are allowed from anywhere by default, and you can restrict them to specific domains under Settings → Access in your dashboard.

One thing worth being clear about: an API key embedded in front-end JavaScript is readable by anyone who views the page source. CORS controls which sites may call the API, not who can read the key. That is a fair trade for public gallery data, but do not reuse that key anywhere private.

Use ?limit= (default 100, maximum 200) and ?cursor=. The response body stays a plain array, so nothing breaks if you ignore this; the paging details travel in the X-Total-Count, X-Has-More and X-Next-Cursor headers. Pass the value of X-Next-Cursor back as ?cursor= to fetch the next page.

No, and that is deliberate. The full key is shown once, when it is created; we store only a hash of it, so nobody — including us — can recover it afterwards. Use Rotate under Settings → API Keys to issue a replacement. The old key stops working immediately, so update your sites before rotating.

Under Notification Preferences in your profile settings. Billing and security notices are always sent, because they are necessary to provide the service.

From your profile settings. Deleting permanently removes your sites, galleries, images and stored files, and cancels any active subscription. This cannot be undone. See the Privacy Policy for what we keep and why.

Send us a message from the contact page — we read everything. If you are looking for setup instructions instead, the getting started guide walks through the first gallery end to end.