This page tells you what happens to your data in PhotoGarland.
Your photos never leave your device
Your photos stay on your device. Your browser does all the work on them.
We do not receive your photos. We do not store them. We never see them.
This is true for every photo, at every step. It is true after you sign in too.
Your finished garland stays on your device too. That is the cost of our promise. We do not hide it.
What lives in your browser
Your browser holds your photos, your cards and your settings. It also holds two small service records.
Both sit in the storage of your browser, next to your work. Each one appears only when you need it.
| The record | What it holds |
|---|---|
| The record of your payment | One key that points at your purchase |
| The size of your brush | One number: the size you chose last time |
No record holds your email. None holds your name. None holds a photo.
The record of your payment disappears together with your work.
The size of your brush lives longer. Deleting your cards does not remove it. Only clearing the data of your browser does.
These two are the only records we write. Our visit counter writes none, see below.
The payment form of our reseller Paddle writes records of its own. They appear only after you open that form yourself. Paddle is responsible for them.
Why you see no consent window
European rules ask for your consent before a site writes a record in your browser. There is one exception. Some records are needed for the service to work at all. Those records need no consent.
One of our records is that kind. Without the record of your payment a guest who paid does not get their file.
The size of your brush keeps a choice you made yourself. We write it only after you change the size. It is one number, and it names nobody.
The records of the payment form appear only after you open the form. Opening it is your own step.
So we ask nothing, and you see no window. We still must name every record, and this section names them.
The visit counter
We count visits. The counter tells us how many people come and which pages they open.
It writes nothing into your browser. It does not know who you are, and it does not follow you to other sites.
It sees the page you opened and the site you came from. It also sees your country, your browser and the kind of device.
We see totals, not people. That is why the counter needs no consent from you.
An outside company runs the counter. The company is Plausible. It keeps the data in the European Union.
Your browser sends each visit to our own server first. Our server passes it on, with your address on the internet and the name of your browser.
Plausible needs these two to tell one visit from another. It turns them into a code that changes every day. It never stores your address.
The counter also notes two steps: you added photos, and you paid. For a payment it gets the sum and the currency, without the tax. It never gets your email or your card.
It never receives a photo. Your photos stay on your device, and no tool changes that.
Your work can disappear
The work lives in one browser on one device. So it can disappear. Here is the full list of cases.
| What happens | Who does it |
|---|---|
| You clear the data of your browser | You |
| You open the site in a private window | You |
| You open the site in another browser or on another device | You |
| Your browser cleans its storage after 7 days without a visit | The browser |
| Your device runs out of free space | The device |
Your purchase does not disappear in any of these cases. It stays with us.
What we store
We store one record for one payment. The record holds these fields.
| Field | Where it comes from |
|---|---|
| Your email | The receipt of the reseller |
| The sum and the currency | The reseller |
| The name of the reseller and its payment number | The reseller |
| The date and the time | The reseller |
We keep this record with no end date. Your email is the way back to your purchase, and it also proves that you paid.
Your email and your card
Our reseller Paddle collects your email. It also collects your payment data.
Your card number never reaches us. It never enters our code and never enters our database.
We receive only the four fields of our payment record.
What signing in gives you
You sign in with your email. We send you a code. You type that code on the screen. There is no password.
Signing in brings us no photos. Your account holds your email and your purchases. It holds nothing else.
Signing in returns your right to download. It does not return your garland. The garland lived on your device, and it stays there.
An outside company sends the letter with the code. The company is Resend.
It receives your email address and the text of that letter. It never receives your photos. It never receives your address on the internet either, because the letter leaves from our server.
Where we keep your account
Your account and the payment record live in a database. An outside company runs that database. The company is Supabase.
It holds your email and the payment record. That record holds the sum, the currency and the payment number of the reseller.
It never holds your photos. It holds no garland and no card either. Your work lives in your browser.
How to ask us to delete your email
We keep your email with no end date, as written above. You can still ask us to delete it.
Read this part first. Your right to download does not come back after that. Your email was the way back to it.
We delete your account as a whole. Your email still stays in the payment record.
Nobody changes or deletes that record. Our accounts need it, and a dispute with a bank needs it too.
So we do not promise to delete every copy of your email.
To ask, write to help@photogarland.com.
The product has no button for this today. A letter is the only way. We answer it like any other letter, see Support below.
Error reports
Our app sends a report when something breaks. The report helps us repair the problem.
The report never holds a picture of your screen. It never holds the name of a file. Both rules are permanent.
An outside company receives that report. The company is Sentry.
It receives the text of the error and the address of the page. It also receives your browser and the kind of device.
Sentry also receives a short note about each step of the photo work. The note says how long the step took. It names the size and the type of the file, and how many faces we found. It never names the file.
Sometimes one email pays twice. Then Sentry receives the two payment numbers of the reseller. It never receives that email.
It never receives your photos. No tool of ours sees them. It never receives your address on the internet either.
It writes nothing into your browser.
Our server
Our server receives the usual technical data of a web request. Your address on the internet is part of that data.
We do not build a profile from it. We do not sell it. We do not pass it to anybody for advertising.
Our server passes your address to one company only: the visit counter, as written above. It does not keep the address.
How long we keep your data
We keep the payment record with no end date, as written above.
The counter keeps totals only. There is nothing in them that points at you.
We keep nothing else, so no other period exists today. A storage period will appear when we start to store garlands. This page will say so on that day.
Support
Write to help@photogarland.com. We answer in English.
We answer in 2 business days or faster.
Our company is 974 SYSTEMS LTDA, registered in Brazil.
Changes to this page
We can change this page. The date at the top shows the last change.