Privacy

Who holds your data

Nostre Foto, Romania. The company details and the registered address go here and are not settled yet.

Contact: privacy@nostrefoto.com. That address is a placeholder until it is.

What we hold

For a guest: the name typed on joining, the frames shot, the time each frame was shot, and the technical log a web request leaves behind.

For a host: the same, plus an email address. There is no payment record, because there is nothing to pay; when there is, our payment processor will hold it and we will still never see a card number.

The photographs

Frames are stored in the EU. Before develop time nobody can read them, and the check that says so runs on the server rather than in the browser. That includes the host.

A second copy is written to a different provider on append-only credentials, so a frame cannot be destroyed by a mistake on our side.

How long we keep it

This section needs a retention period agreed with counsel and does not have one. Placeholder: a roll is kept until the host deletes it, and an account until it is closed.

Your rights

Under the GDPR you can ask for a copy of what we hold, correct it, have it deleted, take it elsewhere, or object to how it is used. Write to the address above.

If you appear in a frame you did not shoot, you can ask for that frame to be taken down. You do not need to be the host and you do not need an account.

Who processes it for us

Cloudflare for hosting, storage and email. Neon for the database, in Frankfurt. Backblaze for the second backup copy. Stripe for payments, once there are any.

Each processor will be restated with its legal entity and location before this page stops being a draft.

Cookies and measurement

This site sets no cookies and runs no analytics. It ships no JavaScript, so there is nothing here to follow you with. The app is a separate deployable and states its own position.

Changes

A change to this page will be dated. It is not dated yet, because it has not been reviewed.