Privacy, in plain words

Your account: the email address and name you sign up with. If you sign in with Google, we receive your email, name and profile picture from Google, nothing else, and never your Google password. If you sign up with a password instead, we store only a bcrypt hash of it, never the password itself.

Your profile: the username, display name, bio, location, contact email and links you choose to publish. All of it is optional except the username, and all of it is public by design: it is your photographer page.

Your photos: the image files you upload, plus the album and caption text you write around them. We read a narrow allowlist of EXIF fields from each file (camera, lens, focal length, aperture, shutter, ISO and capture date) so galleries can show shooting details.

GPS coordinates are never parsed and never stored. Photobari strips location data out of the EXIF it reads, so where you took a photo does not leave your own machine, even if the file you uploaded still carries it.

We run no advertising trackers, no third-party analytics scripts, and no cross-site cookies. Site analytics are Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors. No analytics run on private share pages at all.

We do not buy, sell, rent or trade personal data, and we do not build advertising profiles.

Not on any plan, not as an opt-in default, not for “internal” or “anonymised” models, and not by any company we hand your files to. This is the single promise Photobari exists to keep. Our robots.txt blocks AI training crawlers from every gallery page, and our storage provider is contractually a host, not a licensee.

Photobari is small, so it stands on a short list of providers. Cloudflare hosts the application, stores your photos in R2, and provides cookieless analytics. Neon hosts the Postgres database holding accounts, profiles and album metadata. Brevo sends transactional email: the welcome message and password resets, nothing marketing unless you ask. Google is used only to verify your identity if you choose to sign in with it.

Each of these acts as a processor on our instructions. None of them is permitted to use your photos or your account data for their own purposes.

One cookie: the session cookie that keeps you signed in. It is strictly necessary, so there is no consent banner to click away. There are no analytics, advertising or preference cookies. Signing out clears it.

A share link holds nothing but the permission it grants. Share pages are excluded from search engines in robots.txt, carry no analytics, and never require a viewer to create an account or hand over an email address to see the photos you sent them.

If you leave a note on a shared gallery, the photographer who sent it can read it and may publish it on their page with the name you gave.

You can see, correct or export everything we hold on you from your dashboard at any time, in full resolution and original format. You can delete your account, which deletes your profile, your albums and your image files from storage.

If you are in the EU, UK or California, you also have statutory rights of access, rectification, erasure, portability and objection. Photobari's answer to all of them is the same as its answer to everyone else: ask and we will do it.

Account and photo data live for as long as your account does. Delete the account and the files go with it. Transactional email logs are kept for a short period for deliverability debugging and then discarded.

Photobari is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has an account here, email us and we will remove it.

If this policy changes in a way that affects what we do with your data, we will email account holders rather than quietly editing the page. Questions, requests or corrections all go to the same place.