Legal
Privacy policy
Last updated: March 20, 2026
What we collect
When you sign in with Google, we receive your name and email address from Google's OAuth flow. We store these to identify your account — nothing else from Google.
When you upload photos, we store two resized copies: a 400 px thumbnail and a 1080 px working copy, both in Cloudflare R2. Your originals are never stored on our servers. Metadata you generate or edit is stored in our database and tied to your account.
We log generation events — success, quota exceeded, errors — to enforce rate limits and quota. These logs include a timestamp and your user ID. Not the image. Application logs are retained for up to 90 days, then deleted.
How we use it
- To provide the service: generate metadata, store your photos, let you export your data.
- To enforce quotas and rate limits.
- To manage your subscription and billing.
We don't sell your data. We don't use your photos to train AI models.
Cookies
We use one session cookie to keep you signed in. It's functional — without it the service doesn't work. We don't use advertising cookies or cross-site tracking cookies.
Our analytics tool (Umami) is cookieless and doesn't track you across sites.
Third-party services
- Google OAuth — authentication
- Google Gemini — AI metadata generation (images are sent as base64 for each request and not stored by Google after the call completes)
- Cloudflare R2 — image storage (private bucket, not publicly accessible)
- Paddle — billing and subscription management (they act as Merchant of Record for your payments)
- Umami — privacy-friendly analytics (no cookies, no cross-site tracking)
Your rights (including GDPR)
If you're in the EU or EEA, you have rights under GDPR: access your data, correct it, delete it, or export it. You can delete your account and all associated data at any time from the settings page. For anything else, email us and we'll sort it out.
Data retention
Your photos and metadata stay in your account until you delete them or delete your account. Deleting your account removes all photos, metadata, and personal data from our systems. Application logs are kept for up to 90 days.
Contact
Questions about your data? Email [email protected].