Every published version of this document is listed below. Click into any version to read its full text. The most recent version at the top is the currently-effective one (linked also at /privacy).
| Version | Published | Summary of changes | |
|---|---|---|---|
| v4 | 2026-08-25 | One correction to the cookie section. Marking a photo as a favourite in a gallery sets a first-party id, and the previous version did not say so while stating its list was complete. Nothing about the cookie itself has changed — it is still first-party, still strictly necessary for the feature you used, and still not used for tracking; it was missing from the description. · material | Read |
| v3 | 2026-08-25 | Three corrections. (1) Payment records: we do not hold card details or invoices — Stripe does, as a controller in its own right, and keeps them for six years, so closing your account does not erase them. The previous line implied we held them. (2) Inactive free sites: added the year-of-no-sign-in deletion, with its 30-day and 7-day warnings, which was in effect but undocumented. (3) Cookies: the list now names every cookie we set, including the three set on published sites when a visitor enters a gallery password, replies to an invitation, or uploads to a photo wall. All remain strictly necessary; none are analytics, advertising or tracking. · material | Read |
| v2 | 2026-07-25 | Corrected the Retention section. Form submissions are now kept for 30 days on the Free plan and 12 months on a paid plan (site owners can set a shorter window), replacing the previous 7-day statement. Analytics retention is stated accurately: individual pageview records are deleted after 90 days on every plan, with daily totals kept for the plan window. · material | Read |
| v1 | 2026-07-05 | Initial published version. | Read |