Privacy

PHOTOS is a non-commercial site for sharing photos and videos from shoots and events. Photos are organised into password-protected projects and albums, and visitors can view, download, heart and comment on them. This page explains what the site stores and why.

What is stored

• Photos and videos uploaded by the site's administrator, with the details the camera saved in them (date, camera, lens and exposure settings). Location data from photos is only visible to the administrator.
• Album details the administrator adds, such as titles, notes, dates and an optional place.
• Project passwords, stored only as salted hashes, never in readable form.
• Hearts and comments you leave, with the name you type in. Names aren't checked or linked to any account.
• A random device ID kept in your browser's storage, so the site remembers which hearts and comments are yours. Your browser also keeps the access tokens for projects you've opened, so you don't have to retype the password, the names of projects you've opened (so their title shows straight away next time), and display preferences such as your colours, title font, view and sort order.
• IP addresses, briefly, to limit password guessing. These records are deleted automatically.

There are no ads, no analytics and no tracking cookies, and nothing is sold or shared with anyone.

Google Drive

PHOTOS uses Google Drive only as storage for the original files, in the administrator's own Google account. The server connects to that account with full Drive access, so it can import whole folders the administrator picks, but it only ever works inside the PHOTOS folder and the files and folders the administrator chooses to import with Google's file picker. The picker itself, in the administrator's browser, uses the narrower drive.file permission. PHOTOS never asks visitors to sign in with Google.

Data from Google Drive is used only to import, show and download the originals in PHOTOS. It isn't used for advertising, isn't transferred to anyone else, and isn't used to train AI models. PHOTOS's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Where it lives

Original files are kept in Google Drive. Smaller web copies are on Cloudflare R2. Project, album and comment records are in a Supabase database. Files are only served to people who have the project's password.

Album maps load their tiles from OpenStreetMap, which sees your IP address as part of any web request.

Removing something

If you'd like a photo of you, or a comment you wrote, taken down, email hello@wrrnstrpn.app and it will be removed. You can delete your own comments yourself from the photo's comment panel, on the same device you posted from.