The short version
- We collect only what the album needs: your name, email, the photos you add, and the choices you make about sharing them.
- Photos are private until you share them. Admins can see all photos so they can run the site safely.
- No ads, no tracking, no selling, no AI training. The site uses no analytics or advertising cookies.
- Your account and records are stored by Supabase in the United States. Photo files are stored by Cloudflare R2 in a private bucket. Both are encrypted in transit and at rest.
- You can download your photos at any time, and ask us to delete your account and everything in it.
Who this applies to
This policy covers the Photo Share album (the album page, this page, the Terms, and the contact page). The site is run by Mohan Karki (“we”, “us”), who decides how information on it is used. It is a personal, non-commercial site for family and friends, not connected to any employer, business or organization. It works alongside our Terms of Service.
Region-specific notes
- United States: We don't sell or “share” personal information for advertising, as those terms are used in state privacy laws such as California's, and we don't use it to profile you. You can ask to see, correct or delete your information at any time (see section 08).
- Europe, the UK and Switzerland: We use your information to provide the album you asked to join (performance of an agreement), to keep it safe (legitimate interests), and, for the contact form, to answer you. You have the rights described in section 08, and may complain to your local data protection authority.
- Visitors outside the United States: Your information is stored and processed in the United States, which may have different data protection rules from where you live.
01Information we collect and why
Almost everything we hold is something you typed or uploaded. The tables below list each kind of information, how it's used, and who it goes to.
(a) Your account
| What | How we use it | Who handles it |
|---|---|---|
| Name and email address | To create your account, show who uploaded or shared something, let admins approve you, and send account emails such as password resets, plus a welcome email and reminders before your files are removed. | Supabase (accounts). Account emails are sent from photo.share.102cs@gmail.com through Google (Gmail). Visible to admins and moderators. Your name is visible to members you share with. |
| Time zone and email choice | Your browser's time zone, so reminder emails show times in your local time, and whether you want reminder emails (My account). | Supabase (stored with your account). |
| Password | To sign you in. It's stored only in scrambled (hashed) form. Nobody running the site can see it. | Supabase Auth. |
| Account status and role | Whether you're waiting, approved or turned off, and whether you're a member, moderator or admin. This decides what you can see and do. | Supabase. Visible to admins and moderators. |
| Agreement to these terms | Which version of the Terms and Privacy Policy you accepted, and when, so we know who has seen the current version. | Supabase (stored with your account). |
(b) Your photos and albums
| What | How we use it | Who handles it |
|---|---|---|
| Photo, video and document files, and small preview pictures | To store and show them to you, the people you share them with, and admins, and to let them be downloaded. Video previews and lengths are made in your own browser when you upload. | Cloudflare R2 (a private storage bucket). Files open only through short-lived links, handed out after the database checks who is asking. |
| File name, size, dimensions, upload date, uploader | To list, sort, search and show photo details, and to know who may delete or move a photo. | Supabase. Shown to anyone who can see the photo. |
| Storage use, extra space and the admin's payment note | To show how much space you've used and have left, and to record extra space you've arranged with the team (for example "paid $5 on Nov 2"). We don't store card or bank details. | Supabase. Your usage is shown to you and admins; the payment note only to admins. |
| Album names and organization | To group your photos and show them in the album list. | Supabase. Shown to anyone who can see the album. |
(c) Sharing and activity on the site
| What | How we use it | Who handles it |
|---|---|---|
| Sharing choices and invite links | To decide who can see each album or photo. Invite links record who made them, and are credited to that person when someone joins through one. | Supabase. Admins can see all sharing settings. |
| Removal requests and the reason you give | To pass your request to the uploader or an admin. | Supabase. Seen by the uploader and admins. |
(d) Private messages between members
| What | How we use it | Who handles it |
|---|---|---|
| Messages you send and receive, who sent each one, when, and whether it has been read | To deliver your conversations and show "Seen" to the sender. Nothing else: messages aren't scanned, analyzed or shared. | Supabase. Only you and the other person can read a conversation. Admins can see only the total number and size of messages, so they can manage space. |
(e) Messages from the contact page
| What | How we use it | Who handles it |
|---|---|---|
| Name, email, optional phone, topic and message | To read and reply to your enquiry. Nothing else, and we don't add you to any mailing list. | Supabase. Only admins can read messages. |
(f) Technical information
| What | How we use it | Who handles it |
|---|---|---|
| IP address and basic request details in server logs | Recorded automatically by our providers to deliver pages, keep services secure and fix problems. We don't use it to track or profile you. | Cloudflare (when the pages and files load) and Supabase (sign-ins and data requests), under their own privacy policies. |
| Small settings saved in your browser | To keep you signed in and remember choices like light or dark theme. See section 05. | Stays on your device. |
We don't ask for or use your location, contacts, camera roll (beyond the photos you choose to upload), or any information from social networks.
02Photo details and location data
Photos taken on phones and cameras often contain hidden details, such as the date, camera model, and sometimes the exact location where the photo was taken.
- With “Optimize” on (the default), the site re-saves each photo before uploading it, on your device. This removes location data and other hidden details.
- With “Optimize” off, the original file is uploaded unchanged, including any location data. Anyone who can see the photo can download that original file.
- Preview images never contain hidden details. GIFs are always uploaded unchanged.
Tip: Leave Optimize on unless you need the full original file. If you turn it off, check that you're comfortable sharing where each photo was taken.
03Who can see what
| Who | What they can see |
|---|---|
| You | Your own photos and albums, and anything shared with you. |
| Members you share with | Only the albums or photos you shared with them, plus your name as the person who shared. They can download those photos. |
| All members | Only what you shared with everyone, and members' names in the share list. When searching for someone to message, they also see a shortened email such as b•••@gmail.com. Typing part of your email address (3 or more characters) finds you, but your full address is never shown to them. |
| People with an invite link | Nothing until they create an account and it's approved. Then, only the album or photo the link was for. |
| Moderators | Members' names, email addresses and account status, for approving accounts. Not other people's private photos. |
| Admins | Everything except private messages: all photos and albums, including private ones, all member details, sharing settings, removal requests and contact messages. Admins use this only to run and protect the site. |
| Private messages | Only the two people in the conversation. Admins and moderators can't open them on the site; admins see only how many messages there are and can delete old ones to free space. |
| The public and search engines | Only the sign-in page (including the sign-in pictures an admin chooses for it), plus any single photo whose uploader made a public link for it, and only while that link is valid. Search engines are told not to list those pages. Albums, names and everything else are never public. |
These rules are enforced by the database itself, not just by the web page, so changing the page can't get around them. As with any online service, the person who manages the site's Supabase account has technical access to the stored data, including messages. They won't look at private messages except where the law requires it or to deal with a serious safety report.
05Browser storage, cookies and tracking
The site uses no cookies for tracking, and no analytics, advertising or social-media scripts. Fonts and code libraries come from the site itself, so your browser only connects to Cloudflare (for the pages and photo files) and Supabase (for your account).
To work, the site saves a few small items in your browser's storage. They never leave your device except where noted:
| Item | Purpose | How long it lasts |
|---|---|---|
| Sign-in session | Keeps you signed in. It's sent to Supabase with each request to prove who you are. | Until you sign out, you're signed out for inactivity, or (if “Keep me signed in” is off or not allowed) you close the browser. |
| “Keep me signed in” choice | Remembers whether to keep you signed in after the browser closes. | Until you change it or clear site data. |
| Session rules and last activity time | Lets the site sign you out after the time the admins set, even across tabs. | Until you clear site data. |
| Theme and upload settings | Remembers light or dark theme and the Optimize choice. | Until you change them or clear site data. |
| Invite code | Holds an invite link's code while you create an account, then is removed. | Until it's used. |
You can clear all of these at any time in your browser's settings (“Clear site data”). You'll then need to sign in again.
06How long we keep things
- Photos, videos, documents and albums: until you or an admin delete them or, if the admin has switched it on, automatically 7, 30 or 90 days after they were added (albums go once they're empty). Each file shows how long it has left, and we email you before it's removed. Deleting removes the file and its preview from storage straight away.
- Extra space and payment notes: while your account exists; removed with it.
- Your account: until you ask us to delete it, or an admin removes it. Deleting an account removes your sign-in, member record, shares and removal requests. Your photos are deleted too, unless you ask for them to stay for the people you shared them with.
- Invite links: expire after 30 days, or sooner if turned off.
- Public links: a photo you share outside the album through a public link can be seen by anyone with the link until it expires (1, 7 or 30 days) or you turn it off; admins can turn off all links at once. We keep a simple count of how many times each link was opened, not who opened it. Photos you post to other apps through your device’s share menu are covered by those apps’ own policies. When the site prepares a photo for sharing, it removes hidden location data.
- Unsending: the sender can unsend a message within 24 hours. Its text is erased from the database straight away and both people see “unsent a message” instead. The other person may already have read it. Delete for me hides a single message from your view only.
- Private messages: until both people delete the conversation, or until they reach the age the admins choose for automatic deletion (shown in the Messages window). Admins can also delete old messages to free space, without reading them. Deleting a conversation removes it for you; the other person keeps their copy until they delete it too.
- Contact messages: until an admin deletes them. Admins can set read messages to delete automatically after 30 days to 1 year. Unread messages are never deleted automatically.
- Backups and logs: our providers may keep backup copies and logs for a limited time under their own policies, after which they're deleted.
- Copies others made: photos people downloaded while you shared them with them are outside our control.
07Where it's stored, and security
- Your account and database records are stored by Supabase in the United States (Amazon Web Services, US East region). Photo files and previews are stored by Cloudflare R2.
- All connections use HTTPS (TLS). Supabase and Cloudflare encrypt stored data at rest.
- Photos are kept in a private storage area. Each one can only be opened through a link that expires after a short time, and only by someone allowed to see it.
- Database access rules check every request, so members can only reach what they're allowed to.
- New accounts see nothing until approved, and sessions can end automatically after inactivity.
No system is perfectly secure. If we learn of a breach that affects your information, we'll tell the people affected without unnecessary delay, and explain what happened and what to do.
08Your choices and rights
- Download your photos at any time, one by one, several at once, or all of yours from My account as a ZIP file.
- Delete your own photos and albums yourself, and stop sharing or turn off invite links whenever you like.
- Change your name and password yourself in My account. Ask us for a copy of anything else we hold about you, or to correct it.
- Delete your account and everything in it yourself, under My account, or ask us to do it (see section 06).
- Object or ask us to limit how we use your information, where the law gives you that right.
- Emails: account emails, such as the confirmation code when you sign up and password resets, come from photo.share.102cs@gmail.com. Photo Share's own emails, a welcome email and reminders before your files are removed, come from team@photosharenow.com through Resend; you can turn reminders off in My account. There's no newsletter or marketing.
To make a request, email from the address on your account. We'll reply within 30 days, and we won't treat you differently for asking.
09Children
The site isn't meant for children under 13, and we don't knowingly let them create accounts. If we learn that a child under 13 has an account, we'll delete it. Members aged 13 to 17 need a parent's or guardian's permission.
Photos of children are often what families want to share. Please share them only with people you trust, and only with the consent of the child's parent or guardian. Photos of a child are removed on request from their parent or guardian.
10Links to other sites
This policy covers only Photo Share. Links to other sites, including our providers' policies and email links that open your mail app, are governed by those sites' own policies.
11Changes to this policy
If we change how we handle information, we'll update this page and its version date. For significant changes, we'll ask you to review and accept the new version the next time you sign in.
12Contact
Questions, requests or concerns about privacy: email , or use the contact page. For how the site is built and secured, see How it works.
Version 1.5 · Effective November 1, 2026 · See also the Terms of Service.
Back to top ↑