Privacy policy

Account information

Registered accounts store an email address, username, password hash, verification state and upload permissions. Email delivery uses the configured transactional email provider.

Images and links

The service stores optimized images, titles, descriptions, tags and expiry dates. Uploaded originals and location metadata are removed after successful processing. Public gallery content is visible to visitors; unlisted links can still be opened by anyone who has them.

Cookies and abuse controls

Essential session cookies support login, form protection and guest image management. Cloudflare Turnstile verifies forms. A pseudonymous key derived from the connecting IP address helps enforce upload limits; a guest management link acts as a credential. Keep it private.

Deletion and backups

Expired and deleted images are removed by the server cleanup process, normally within one minute when its timer is running. Browsers and delivery caches can retain earlier copies, and saved copies cannot be withdrawn. When configured, encrypted Google Drive backups retain deleted images for seven days for recovery; restoring a backup must reapply deletion and expiry records. Operational audit records are retained for 90 days.