Privacy Policy

What we collect

Account data. When you sign in with Google or GitHub we receive your name, email address, and profile image from that provider. We never receive your password.

Content. Images you upload, along with the metadata you attach to them (alt text, descriptions, tags, links) and the sites and galleries you create.

Billing data. If you subscribe, Stripe processes your payment. We store your Stripe customer and subscription identifiers, your plan, and its status. We never see or store your full card number.

Usage data. Aggregate analytics about page visits via Vercel Analytics, and server logs containing IP address and request metadata.

How we use it

To operate and secure the Service, to process payments, to enforce plan limits, and to send you transactional email — billing notices, usage warnings, trial reminders, and a welcome message. You can turn off non-essential email in your profile settings; billing and security notices are always sent because they are necessary to provide the Service.

Who we share it with

We do not sell your personal data. We share it only with the processors needed to run the Service:

• Stripe — payment processing and billing
• Amazon Web Services — image storage and delivery
• Neon — database hosting
• Vercel — application hosting and analytics
• Resend — transactional email delivery
• Google and GitHub — authentication

Public content

Images you upload are served from a public content delivery network so they can be embedded in your sites. Anyone with the URL of an image can view it. Do not upload anything you need to keep confidential.

Retention and deletion

We keep your data while your account is active. Deleting your account from your profile settings permanently removes your sites, galleries, images, and stored files, and cancels any active subscription. Some records, such as billing history held by Stripe, are retained where required for legal and accounting purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can delete your account yourself at any time, or contact us for anything else.

Cookies

We use cookies that are necessary for the Service to work, primarily to keep you signed in. We do not use advertising or cross-site tracking cookies.

Changes and contact

We will post any changes to this policy here and update the date above. Questions or requests? Use the contact page.