Privacy.

When you sign in we store your email and an encrypted password. When you create a gallery we store its name, the name of whoever you’re sharing with (if you set one), an encrypted passcode, and the photos you upload. That’s the list.

Uploads sit in private, encrypted storage. They are never publicly indexable. Whoever you share with sees them through signed URLs that expire after one hour and refresh on each visit.

Only the gallery you shared, after entering the passcode. No account, no sign up, and no view into any other shoot. We store the photos they choose — nothing else about them.

• We do not sell, share, or rent your data.
• We do not train AI models on your photos.
• We do not run ad networks or third-party trackers.
• We do not look at your galleries.

Delete a gallery from the admin and the photos and selections are wiped immediately. Reach out from the dashboard to fully delete your account.

Two cookies. One keeps you signed in on the admin side. One remembers that your visitor entered the correct passcode for a gallery. Both are httpOnly and sameSite=lax. No analytics cookies.