Privacy Policy

At photo2url, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Information We Collect When you use photo2url, we collect: - Image files you upload and technical metadata (filename, size, type). We strip EXIF data (such as GPS location and camera information) on the server side upon upload and do not store this embedded information. Images are stored on Cloudflare R2 to provide shareable links. - IP address, upload timestamps, and usage data for rate limiting, security, and abuse prevention. - Account information when you register or log in (email, Google OAuth profile, session and authentication tokens). - Subscription and payment information processed by our payment provider Waffo when you purchase a paid plan — we do not store full card numbers. - Information you provide when contacting us via email (such as name, email). - Cookies and similar technologies, as detailed in the Cookies section below. How We Use Your Information - Generate and provide shareable image links (legal basis: contract necessity) - Process account registration, login, and subscription management (legal basis: contract necessity) - Enforce upload limits, prevent abuse, and protect service security (legal basis: legitimate interest) - Analyze anonymized usage trends to improve the service (legal basis: consent) - Display personalized advertisements (legal basis: consent) - Comply with legal obligations We do not sell your personal information. Data Storage and Retention Uploaded images are stored on Cloudflare R2 and delivered via a global CDN. Retention policy: - Free users: Files are automatically deleted after 180 days of inactivity (file not accessed and account not logged in during this period); 200 MB storage limit. - Paid users (Plus / Enterprise): Files are retained permanently until subscription cancellation. - Content that violates our Terms of Service may be removed immediately. In cases involving illegal content, we may report to law enforcement. Cookies and Tracking Technologies We use the following technologies: - Essential cookies and local storage: Used for authentication and language preferences to keep the service functioning. - Google Analytics: Anonymized website analytics (enabled only with your consent). - Google AdSense: Personalized advertising (enabled only with your consent). Non-essential cookies are off by default and are only activated when you opt in through our cookie preference panel. You can update your preferences or withdraw consent at any time. You may also manage cookies through your browser settings, or opt out of personalized advertising via Google Ad Settings (https://adssettings.google.com) and www.aboutads.info. Third-Party Services We use the following third-party services: - Cloudflare R2: Image storage and CDN delivery - Waffo: Payment and subscription processing - Google OAuth: Third-party login authentication - Google Analytics: Website analytics - Google AdSense: Advertising display These services may collect information in accordance with their respective privacy policies. Due to the global distribution of Cloudflare and Google servers, your data may be transferred internationally (e.g., to the US, EU). We rely on mechanisms such as Standard Contractual Clauses to ensure such transfers comply with applicable law. We encourage you to review the privacy policies of these services. Data Security We implement appropriate technical and organizational measures to protect your data. In the event of a data breach, we will notify relevant regulatory authorities and affected users as required by applicable law. Your Rights You have the right to: - Access and correct your personal information - Delete your images and account data - Export your data in a structured format - Restrict or object to the processing of your data - Withdraw your consent at any time - Contact us with privacy questions, or lodge a complaint with your local data protection authority To exercise these rights, contact us at [email protected]. Children's Privacy Our service is not intended for minors. Specifically: under 16 in the EEA (or a lower age set by the relevant member state), under 13 in the United States, and under 14 in China. We do not knowingly collect personal information from minors. Changes to This Privacy Policy We may update this Privacy Policy from time to time. For material changes, we will post the new policy on this page, update the "Last updated" date, and notify you via email or on-site notice where appropriate. Contact Us - Privacy inquiries: [email protected] - Report abuse: [email protected]