SnapStaqAll posts
Security·17 March 2026·3 min read

How SnapStaq Keeps Your Client Galleries Secure

Your photos are valuable. Your clients trust you with some of the most important moments of their lives. Here is exactly how SnapStaq protects that trust.

When a client opens a gallery you have shared, they are trusting you — and the platform behind you — with some of the most personal images in their life. Here is exactly how SnapStaq protects that trust.

Access by link only

There is no public directory of galleries on SnapStaq. The only way to access a client gallery is with the specific link you generate for it. No one can browse galleries, search for them, or stumble on them. Only people you share the link with can reach it.

Hidden and draft galleries are truly invisible

When you set a gallery to Hidden or leave it in Draft, it becomes inaccessible at the database level — not just hidden from search. Even someone with the direct link will see an access denied response. This is enforced at both the API layer and the database layer simultaneously.

No third-party tracking

There are no advertising pixels, no Google Analytics scripts, and no third-party trackers of any kind on SnapStaq galleries. When your client browses their photos, that behaviour is not being collected and sold to advertisers. The only data we collect is the activity you can already see in your dashboard — downloads, favourites, and visits.

Your photos stay yours

Photos are stored securely on Cloudflare R2 infrastructure with access controls that prevent unauthorised retrieval. We never use your photos for marketing, AI training, or any purpose outside of delivering them to your intended recipients. When you delete photos, they are permanently removed from storage within 30 days.

Rate limiting on all sensitive actions

Login attempts, account creation, and contact form submissions are all rate-limited. This means that bots and automated attacks are stopped before they can do any damage. A real person using the platform normally will never notice this — it only activates when something abnormal is happening.

Secure by default

Every connection to SnapStaq is encrypted over HTTPS. Security headers are set on every page to prevent clickjacking, content injection, and other common browser-based attacks. We conduct regular security reviews of the platform and fix issues proactively — not reactively.

If you ever have a security concern or question, contact us directly at [email protected].

Back to Blog
Help CentreTermsPrivacySnapStaq