Privacy Policy

Our Commitment

SnapStaq is built on a simple principle: your data belongs to you. We collect only what is needed to run the platform, we do not sell your data, and we do not track you for advertising purposes. This policy explains exactly what we collect and why.

1. Information We Collect

Account information: When you sign up, we collect your name, email address, and username. Photographers may also provide a business name and contact email.

Photos and content: Photos you upload are stored on your behalf on Cloudflare R2 infrastructure.

Usage data: We record download events and favourites activity so Photographers can see how clients are engaging with their galleries. This data belongs to the Photographer.

Client information: When a Client accesses a gallery or downloads photos, we may record their email address if they provide it. This information is visible only to the Photographer whose gallery they visited.

2. How We Use Your Information

• To provide and operate the SnapStaq platform
• To keep your account secure and your session active
• To send transactional emails (gallery share notifications, download alerts, favourites submissions)
• To display your galleries to the clients you choose to share them with

We do not use your information for advertising, profiling, or any purpose outside of delivering the service.

3. Cookies and Local Storage

SnapStaq uses essential cookies and local storage only:

• Session cookies — keep you logged in to your account
• Theme preference — remembers your display settings
• Cookie consent — remembers that you have seen this notice

There are no advertising cookies, no analytics tracking scripts, and no third-party pixels on SnapStaq.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for their own purposes. We use the following trusted services to operate the platform:

• Supabase — database and authentication (EU region)
• Cloudflare R2 — photo storage
• Vercel — web hosting
• Resend — transactional email delivery
• Google Cloud — image processing (photos are processed and not stored long-term)

Each provider is contractually bound to handle data securely and only for the purpose of delivering our service.

5. Data Retention

• Active photos are retained as long as your account is active
• Photos moved to trash are permanently deleted after 30 days
• If you delete your account, all your data is permanently removed within 30 days
• Download and activity logs are retained for 12 months

6. Your Rights

You have the right to:

• Access all data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your photos at any time

To exercise any of these rights, contact us at [email protected].

7. Security

We take security seriously. All data is transmitted over HTTPS. Photos are stored with access controls that prevent unauthorised access. We conduct regular security reviews of our platform.

8. Children

SnapStaq is not directed at children under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We will notify you by email when material changes are made to this policy. The effective date at the top of this page will always reflect the most recent version.

10. Contact

Questions or concerns about this policy? Reach us at [email protected].