Privacy

The short version

We keep what we need to run your store or deliver your photos, and nothing more. We don't sell your data, we don't run ads, and we never see buyer payments, because buyers pay sellers directly.

What we collect

• From Google sign-in: your name, email address and profile picture.
• Photos sellers upload, and the payment screenshots and notes buyers upload.
• Orders: what was bought, from which store, the amount and its status.
• A cookie that keeps you signed in, and one that remembers your cart before you sign in.
• Basic security logs. IP addresses and browser details are stored only as salted hashes.

Who sees what

• When you order from a store, that seller sees your name, email address, the photos you ordered, your payment screenshot and any note you add. They need these to check your payment and get in touch.
• Other sellers don't see your details. Only you and the seller can see your payment screenshots.
• Buyers see a store's name, bio, watermarked previews and the payment details the seller chose to publish.

Services we rely on

• Cloudflare hosts the site, stores files and sends our emails.
• Google handles sign-in.
• Dodo Payments processes seller subscriptions as merchant of record, and handles that billing data under its own privacy policy.

How long we keep it

We keep your account and orders while your account is open. Photos a buyer has paid for are kept so they can still download them. Ask us to delete your account and we'll remove your personal data, except what we must keep by law or for an open dispute.

Your choices

You can ask for a copy of your data, a correction or deletion. For anything about a particular order, the seller is usually the quickest contact, since they hold the details of the sale.