Privacy Policy
Last updated: May 20, 2026
We collect your email address and password (stored as a salted hash) when you register. We collect the photos you upload, along with metadata such as file size, upload date, and EXIF data (if present — including GPS coordinates if your device embeds them). We collect usage data (storage used, retrieval requests) to operate the service. We collect payment information via Stripe — we never store your card details directly.
Every uploaded photo is automatically scanned for child sexual abuse material (CSAM) using AWS Rekognition (machine-learning detection). When illegal content is detected, the content is quarantined, the account is flagged, and a report is submitted to the National Center for Missing & Exploited Children (NCMEC) as required by law. At share-link creation time, we additionally check content against StopNCII's non-consensual intimate imagery (NCII) hash database. All moderation is automated — no human reviews your photos unless an abuse report triggers a manual review. Moderation results are stored securely and not used for advertising.
Photos are encrypted in transit using TLS/HTTPS for every upload, download, and API call. Photos at rest are protected by infrastructure-provider encryption on hot storage (Backblaze B2) and additionally encrypted at the application layer with AES-256-GCM in cold storage (the Archive), using a per-user encryption key. These keys are wrapped with a master key under our control, which means we can decrypt content when needed for restore operations and for the legally-required CSAM scanning. We never decrypt your content for profiling, advertising, AI training, or any purpose other than serving the product to you and meeting our legal obligations.
Your photos are stored to provide the service. We do not scan them for advertising purposes, use them to train AI models, sell them to third parties, or allow employees to view them (except in response to a valid law enforcement request or a manual abuse-report review).
When you upload a photo, any EXIF metadata embedded by your camera or phone (including GPS coordinates, camera model, and timestamp) is stored alongside your photo and used to organise your library — for example, to determine the date a photo was taken. When you share a photo via a share link, the original file including its EXIF data is served to recipients. If you do not want GPS or camera information to be visible to people you share with, please strip EXIF from your photos before uploading, using your phone's native tools or a third-party app.
We use only essential cookies necessary to operate the service: a session authentication cookie, a terms-acceptance state cookie, and a short-lived invitation token cookie. We do not use advertising cookies, analytics trackers, or third-party tracking pixels. For the full list of cookies and their purposes, see our Cookie Policy at preserveforever.photos/cookies.
Your photos are retained as long as your account is active. If you delete your account, your photos are permanently deleted from our systems within 30 days. Archive (cold storage) photos may take up to 90 days to be fully purged from all backups.
If you are in the EU, EEA, or United Kingdom, you have the following rights: (a) Right of access — request a copy of the personal data we hold about you; (b) Right to rectification — ask us to correct inaccurate data; (c) Right to erasure — delete your account and all associated data at any time via Account Settings → Delete Account; (d) Right to data portability — download a structured JSON export of your profile, photo metadata, and sharing history via Account Settings → Export Data, or by requesting it at privacy@preserveforever.photos; (e) Right to object — object to processing where we rely on legitimate interest; (f) Right to withdraw consent — where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. We will respond to all data subject access requests (DSARs) within 30 days of receipt. To exercise any of these rights, email privacy@preserveforever.photos.
In the event of a personal data breach, Preserve Forever Ltd will notify the UK Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, where it is likely to result in a risk to the rights and freedoms of individuals, as required by UK GDPR Article 33. Where a breach is likely to result in a high risk to affected individuals, we will also notify those individuals without undue delay. To report a suspected security incident, email security@preserveforever.photos.
We use the following third-party services: AWS (S3 Glacier Deep Archive for cold storage; Rekognition for mandatory content moderation; KMS for encryption key management); StopNCII for NCII hash matching at share time; NCMEC CyberTipline for mandatory CSAM reporting; Backblaze B2 for hot photo storage; Supabase for authentication and database; Stripe for payments; and Resend/SMTP for transactional emails. Each of these services has their own privacy policy. Image hashes (not image content) are transmitted to StopNCII solely for child safety purposes.
The data controller is Preserve Forever Ltd, Company No. 17198569, 124–128 City Road, London, United Kingdom EC1V 2NX. For privacy questions, data requests, or to exercise your rights, email: privacy@preserveforever.photos. For security concerns, email: security@preserveforever.photos.