Privacy Policy

Account information: your name, email address, password (stored only as a hash by our authentication provider), optional phone number and optional profile photo.

Photographer information: business or studio name, biography, city and country, website and portfolio links, contact phone, and the galleries and photos you upload.

Contact and marketing information: details you type into our contact form, newsletter signups, and the name, email address and optional phone number you leave on a photographer's photo-request form (including whether you ticked the consent box).

Uploaded photos and their technical metadata: file size, pixel dimensions, generated preview and watermarked versions, the gallery a photo belongs to, its price and description.

Order information: the photos purchased, prices, coupon or pack discounts applied, order status and payment references. We do not receive or store your full card number.

Technical information needed to run and protect the service: the requests your browser makes to us, and a short-lived hashed fingerprint derived from your network address, used only to rate-limit public forms against spam.

To create and secure your account and to sign you in.

To publish galleries, show watermarked previews, take payment and deliver the full-resolution files you have bought.

To let a photographer contact people who asked to be notified when their event photos go online.

To send transactional messages such as purchase confirmations, notification emails you requested, and account or moderation updates.

To moderate content, detect abuse and spam, keep accounting records for photographer earnings, and comply with legal obligations.

Some galleries are private and reachable only through a direct link that contains a secret key. Anyone holding that link can view the watermarked previews in that gallery, so treat it like a password and only share it with people who should see the photos. Private galleries are never listed in search, category pages or our sitemap.

Stripe processes payments. When you check out you are redirected to Stripe's hosted checkout and Stripe handles your card details directly under its own privacy terms. We receive only the outcome, an order reference and payment identifiers.

Resend delivers our transactional and notification email. Recipient email address, subject and message content pass through Resend in order to be delivered.

Supabase provides our authentication, database and file storage infrastructure, so the data described above is stored on infrastructure it operates on our behalf.

We do not sell your personal information, and we do not share it with advertising networks.

We use only the storage strictly necessary to keep you signed in and to remember your cart and wishlist. We do not run third-party advertising trackers. If we later add analytics, this section will be updated before it goes live.

Account, order and earnings records are kept while your account exists and afterwards for as long as we need them for accounting, tax, dispute and legal purposes.

Collected contact details for photo notifications are kept until the photographer deletes them or you ask us to remove them.

Uploaded photos are kept until the photographer or an administrator deletes them. Spam-protection fingerprints are short-lived and contain no readable address.

Full-resolution original files are stored in private storage and are never publicly linked; they are released only through short-lived, signed download links tied to a paid order. Access to database records is restricted per user by row-level security rules, and secret keys used to send email or take payment exist only on our servers.

No online service can promise perfect security, but we work to keep these protections current.

Link2Pics is not intended for children, and accounts may only be created by adults or by someone with legal authority to accept these terms. If a photo of a minor has been published and you are their parent or guardian, contact us and we will review and remove it where appropriate.

You can view and edit your own profile in your account at any time, and you can ask us to correct, export or delete your personal information. Depending on where you live you may also have the right to object to certain processing or to withdraw consent for marketing messages.

Some information must be retained even after an account is closed, for example records of completed sales and payouts.

To make a request, contact us using the details on our Contact page. We may need to verify who you are before acting.

Link2Pics and its service providers may store and process information in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for those transfers.

We may update this policy; the date at the top always shows the current version. Questions about this document can be sent through our Contact page, and we will route them to the right person.