Privacy
Privacy Policy
Last updated November 3, 2026. This explains what ImageAlbums collects, why we collect it, and how you can control your information.
Summary
We do not sell personal data
We do not sell your account details, album data or photos to advertisers or data brokers.
Albums are controlled by links
Anyone with a public album link may be able to view that album, so share links carefully.
You can ask about your data
You can request access, correction, deletion, export or other privacy help using the contact details below.
1. Overview
Cloudivex LLC, doing business as ImageAlbums, provides tools to create, manage and share online photo albums. We collect only the information we need to run the service, keep accounts secure, display albums, respond to support requests and prevent abuse.
This policy applies to people who create albums, manage accounts, view shared album links, leave a message in someone else’s album, contact support or submit abuse reports.
2. What We Collect
- Account information: name, email address, password hash, Google sign-in identifier if used, role, plan and account settings.
- Album content: uploaded photos, thumbnails, captions, album titles, descriptions, templates, colors, links and other gallery settings.
- Album claim data: a claim token that lets you return to an album you made without an account or claim it after creating an account.
- Guestbook messages: the name and message a guest leaves in someone else’s album, and whether the album owner has approved it.
- Usage information: album view counts, storage usage and basic operational logs needed to run and protect the service.
- Album statistics: daily totals for each album, such as views, QR code scans, guestbook messages and downloads. These totals contain no information that identifies individual visitors.
- Abuse-prevention data: a one-way, keyed hash of your IP address, stored with short-lived rate-limit counters and with guestbook messages, so we can limit abuse without keeping the address itself.
- Support and abuse reports: messages, reporter email addresses, album links and details you send to us.
3. How We Use Data
We use personal information and album content to:
- Create, host, display, edit and share your albums.
- Authenticate users and protect account access.
- Show dashboard totals such as views, albums and storage use, and per-album statistics.
- Show album owners the guestbook messages guests leave, so they can approve, hide or delete them.
- Respond to support, privacy, copyright and abuse requests.
- Detect spam, security issues, misuse and policy violations.
- Maintain, debug and improve ImageAlbums.
4. Legal Bases for Processing
Where GDPR applies, we rely on legal bases such as performance of a contract when we provide the album service, legitimate interests when we secure and improve the service, consent where a feature specifically asks for it, and legal obligations when we respond to lawful requests or compliance needs.
6. Data Retention
- Registered accounts: account and album data is kept while the account remains active, unless you delete it or ask us to remove it.
- Albums made without an account: kept with no time limit. You can claim one by creating an account in the same browser, or ask us to delete it.
- Guestbook messages: kept until the album owner deletes them or the album. If you left a message and want it removed, ask the album owner or contact us.
- Album statistics: kept with the album and deleted when the album is deleted.
- Reports and support records: we may keep these as long as needed to investigate issues, enforce rules, resolve disputes or meet legal obligations.
- Backups and logs: deleted information may remain briefly in backups or security logs before normal rotation removes it.
7. Security
We use practical safeguards such as HTTPS, HTTP-only session cookies, password hashing, access controls and restricted admin tools. No online service can guarantee perfect security, so you should use a strong password and share album links only with people you trust.
Photos may be stored with configured object storage providers, such as Cloudflare R2 or another S3-compatible storage service, depending on the production environment.
9. Your Privacy Rights
Depending on where you live, including in the European Economic Area, United Kingdom or California, you may have rights to:
- Know what personal information we process and request a copy.
- Correct inaccurate or incomplete account information.
- Delete personal information, subject to legal and security exceptions.
- Restrict or object to certain processing.
- Request portability of information you provided to us.
- Opt out of sale or sharing where applicable. We do not sell personal information.
- Complain to your local data protection authority if you believe your rights were not handled properly.
We may need to verify your identity before completing a request. Where GDPR applies, we aim to respond within one month unless the request is complex or we are legally allowed more time.
10. Contact
For privacy questions, data rights requests or general support, email support@imagealbums.com.
We may update this policy as ImageAlbums changes. When we make meaningful changes, we will update the date at the top of this page.