Privacy

We store personal information because that is what makes a private family archive useful. We protect it, and we do not monetise, advertise against or repurpose it.

What the archive stores

Account information includes your name, email address, password hash, preferences, plan, storage usage and security records. Archive content can include photographs, captions, dates, places, technical image information, named people, family relationships and private sharing choices. An invited family member may be represented in photographs without having an account.

Why we use it

We use this information to operate your account, preserve and display your archive, make browsing and search useful, enforce storage limits, deliver invitations and account messages, provide support, prevent abuse and maintain security. We do not sell photographs or personal information; use photographs for advertising; profile family members for marketing; or use photographs to train AI models.

Private sharing

Albums are private unless their owner deliberately invites someone. Viewers can see a shared album; contributors can also add photographs they own. Access is checked by the server and can be revoked by the owner. There is no public searchable user directory.

Photograph metadata and location

Original uploads may contain camera and GPS metadata. Originals remain in protected storage. Web previews are decoded and re-created where server support is available so unnecessary embedded metadata is not carried into them. Authorised users may see location fields associated with a photograph; they are never published as public listings.

Service providers and international processing

Hosting, email delivery and future payment providers may process only the limited data needed to supply their service. We will assess providers, use appropriate contracts and safeguards, and keep the current provider information available through our contact address.

Cookies, sessions and security records

Essential cookies keep you signed in and protect forms. A device-local preference remembers Large Text Mode. Security logs record limited events such as login attempts, password changes and sharing changes. They are for account protection and administration, not behavioural advertising analytics.

Retention, Trash, export and deletion

Trashed photographs remain recoverable for the configured retention period and continue to count toward storage until permanently removed. You can prepare an export containing originals you own plus a structured manifest. An account deletion request is staged so shared albums and contributor-owned photographs can be handled by clear ownership rules rather than casual cascading deletion. Backup copies may expire on a separate controlled schedule.

Children and family records

Family photographs can include children and people who are no longer living. Account holders are responsible for uploading and sharing material lawfully and sensitively. A person record is not an account and does not require an email address.

Your rights and contact

BackTwoFront Technologies Ltd operates this private archive service. Depending on applicable law, you may have rights to access, correct, export, restrict or erase personal information and to complain to a supervisory authority. We process account and archive data to provide the service you request, protect it, meet legal obligations and, where relevant, act on your consent. Contact familyalbum@backtwofront.com with a privacy request.