Privacy Policy

Effective Date: September 17, 2025

Introduction

Welcome to Photo Album ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our photo album service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you register on the website, express an interest in obtaining information about us or our products and services, when you participate in activities on the website, or otherwise when you contact us.

The personal information we collect may include:

  • Name and Contact Data (first and last name, email address)
  • Credentials (usernames, passwords, password hints, and similar security information)
  • Media (photos and videos you choose to upload)
  • Metadata associated with your media files (date taken, location if available, camera information)

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the website. This information does not reveal your specific identity but may include:

  • Log and Usage Data (browser type, access times, pages viewed, IP address)
  • Device Information (device type, operating system, unique device identifiers)
  • Location Information (general location inferred from IP address)
  • Cookies and similar tracking technologies

How We Use Your Information

We use personal information collected via our website for a variety of business purposes described below:

  • To facilitate account creation and authentication
  • To provide, operate, and maintain our photo album services
  • To manage user accounts and provide customer support
  • To organize and display your photos according to your preferences
  • To send administrative information to you
  • To protect our services and users from fraud, abuse, and security threats
  • To enforce our terms, conditions, and policies
  • To comply with legal obligations
  • To respond to legal requests and prevent harm

Sharing Your Information

We may share or transfer your information in the following situations:

  • With Your Consent: We may share your personal information for any purpose with your explicit consent
  • Legal Obligations: We may disclose your information where required to comply with applicable law or governmental request
  • Vital Interests: We may disclose your information where necessary to investigate, prevent, or take action regarding potential violations of our policies
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition
  • Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us (e.g., cloud storage providers like Dropbox)

Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information. However, please note that no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

Your photos and data may be stored using third-party services including:

  • Dropbox for photo storage and synchronization
  • Redis for caching and performance optimization
  • Server infrastructure for application hosting

We will retain your personal information only for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required by law.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request access to your personal information
  • Rectification: Request correction of inaccurate personal information
  • Erasure: Request deletion of your personal information
  • Data Portability: Request transfer of your personal information to another service
  • Objection: Object to our processing of your personal information
  • Restriction: Request restriction of processing your personal information
  • Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your information

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information is collected, used, shared, or sold
  • The right to delete personal information held by us
  • The right to opt-out of the sale of personal information (we do not sell personal information)
  • The right to non-discrimination for exercising your privacy rights

European Data Protection Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal information.

If you wish to be informed about what personal information we hold about you and if you want it to be removed from our systems, please contact us using the information provided below.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

The types of cookies we use include:

  • Session Cookies: Used to operate our service and maintain your session
  • Preference Cookies: Used to remember your preferences and various settings
  • Security Cookies: Used for security purposes and to authenticate users

Third-Party Services

We may employ third-party companies and individuals to facilitate our service. These third parties have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Third-party services we use include:

  • Dropbox for file storage and synchronization
  • Authentication services for secure login
  • Hosting and infrastructure providers

Updates to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Information

If you have questions or comments about this Privacy Policy, please contact us at:

Photo Album Privacy Team

Email: privacy@photoalbum.example.com

Address: 123 Photo Street, San Francisco, CA 94102

Phone: 1-800-PHOTOS-1

For data protection inquiries, you may also contact our Data Protection Officer at: dpo@photoalbum.example.com

Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the specific information concerned and the context in which we collect it. We may process your personal information because:

  • We need to perform a contract with you
  • You have given us permission to do so
  • The processing is in our legitimate interests and not overridden by your rights
  • To comply with the law