Privacy

Who runs this

Loosh’s Studio is a small independent service. For questions about this page, or any request about your own data, write to privacy@loosh-studio.com. A person reads it.

What is stored

Your account: an email address, and either a password stored only as a hash or the identifier of a Google account. A name, if you gave one.

Your albums: the photographs in them, how each page is arranged, any text you write, and the names you give to events and to people.

Photographs other people upload through a contributor link. They become part of the album the link belongs to.

The photographs themselves

Photographs are kept in private storage with no public address. Each one is reached through a link that expires within the hour, and a link is issued only to someone who already has access to that album.

Two copies are kept. One is the file exactly as it was uploaded. The other is a smaller copy for the screen, with all camera metadata removed, including the location a phone records. The original keeps its metadata and is never sent to a browser. Only the server reads it, when it builds a PDF.

Face recognition

Face recognition is off until you switch it on for a particular album. The date you switch it on is recorded.

The measuring happens in your own browser. No photograph is sent to a face recognition service. What reaches the server is a list of 128 numbers per face and the position of the box it was found in. It is not a picture. It is never sent back to any browser, and it is never compared with anything outside your album.

You choose the names. Deleting a person, switching the feature off, or deleting the album also deletes the measurements.

What is never done

There is no advertising, no analytics, no tracking cookie and no third-party script. None of it is in the code.

Photographs are never used to train any model. Nothing is sold. Nothing is shared with anyone outside the infrastructure listed below, which only stores and serves it.

Cookies

Two, and both are needed for the site to work. One keeps you signed in. The other remembers whether you chose English or Hebrew. Neither tracks you, so there is no cookie banner here.

Where it is kept

The application runs on Vercel, the database is Neon in Frankfurt, and the photographs are in R2 at Cloudflare. All three only store and serve the data so the service can run. They do not use it for anything of their own.

How long it is kept

Your albums and photographs are kept until you delete them. Deleting an album also deletes its photographs and any face measurements, from storage and from the database.

You can close your account from your account settings. Closing it deletes everything belonging to it.

Contributor links

A contributor link lets anyone holding it upload photographs to one album without an account. It expires, and it accepts a limited number of files and a limited number of megabytes. Its address is shown once and then stored only as a hash, so it cannot be shown again.

Treat it as a key. Anyone you pass it to can use it.

Your rights over your data

You can ask for a copy of everything held about you, a correction of anything wrong, deletion, or an export to take elsewhere. Write to the address above.

In the European Union and the United Kingdom these are the rights the GDPR gives you. This is how to use them.

Photographs of children

A family album is full of them. Whether to upload a photograph of a child is the decision of the person uploading it, and their responsibility. Once it is here it is treated like every other photograph: private, shown to nobody, and reachable only by the album’s owner and the people they invite.

Changes to this page

The date at the top says when this page last changed. If what is stored, or who can see it, changes in any material way, it will be stated here plainly.