Privacy Notice
We run a film lab. This page says exactly what we know about you, why, and for how long. It is short because there genuinely isn't much.
The short version
- We don't use tracking cookies. There is no cookie banner because there is nothing to consent to.
- Our analytics are self-hosted on our own hardware. **No data about your visit is sent to anyone else — not Google, not anyone.**
- We never record the web address of your private gallery or your order tracking link, because those links are your keys.
- We don't sell or share your personal information. There is nobody to sell it to.
- Your photographs are yours. We don't look through them, train anything on them, or show them to anyone.
What we hold, and why
To do the work: your name, email, postal address, and what you ordered. We can't develop your film and post it back without these. Orders and payment live in our business system; we never see or store your full card number — the payment processor handles that.
Your scans. The files we produce for you, in your own gallery.
Support messages you send us, so we can answer them.
What our analytics see
Every page counts as one anonymous visit. We record the page, roughly where in the world it was opened, and what kind of device it was. That's it.
We do not record:
- your gallery link or your order tracking link — both contain a private key, and we deliberately report them as
/s/:codeand/track/:tokenso the real address is never written down anywhere - cookies, or any identifier that follows you between visits or between sites
- your name, email, or IP address in any stored record
Your IP address is used for a moment to work out which country a visit came from, then discarded. It is never stored.
We don't measure our staff tools at all — analytics only run on the two pages customers actually use.
Counting gallery opens
We count how many times each gallery has been opened, so we can tell you ("opened 12 times") and so we can spot something abusing a link.
That counter is a number attached to the album, not to a person. It records no IP address, no device, no location, nothing that describes who opened it. We cannot tell you who looked, because we don't know.
How long we keep things
Your gallery stays open for the period you bought — 90 days included with your order, or one year, or lifetime.
When it ends, you get 14 more days. However it ends — the window ran out, or you deleted it yourself — your files stay recoverable for 14 days and we can put them back if you ask. This is on purpose: people miss the window, and people delete things by accident.
After those 14 days, the files are deleted for real and we cannot get them back. Not "hidden" — gone.
Lifetime storage does not expire. You can still delete it whenever you want, and the same 14-day window applies.
Order records (who ordered what, and when) are kept for as long as tax and accounting law requires, separately from your photographs.
Your rights
Whatever your local law grants you — the UK/EU GDPR, the California CCPA/CPRA, or similar — applies here, and you don't have to quote a statute at us to use it. Email us and we'll:
- tell you what we hold about you
- correct anything wrong
- delete your photographs and account data (subject only to records we're legally required to keep)
- send you a copy of your files
We aim to answer within 30 days. There is no charge.
We do not sell or share your personal information, in the specific sense California law uses those words or in the ordinary sense. We have no advertising partners and no third-party trackers.
Where your files live
On our own hardware, not a public cloud. Backed up. Access to the storage is restricted to a small number of machines on our own network, and only staff who need it.
We use a small number of outside services to run the business — payment processing, postal carriers, and email delivery. They receive only what they need to do their part (a card payment, a shipping address, a message). Our analytics are not one of them; we host those ourselves.
Children
The lab isn't aimed at children under 13, and we don't knowingly hold their personal information.
Changes
If we change something that matters, we'll update the date at the top and say what changed. We won't quietly make this worse.
Contact
A real person reads it.