Privacy

Draft – not legal advice.

This page is a draft for the owner to review. It is not legal advice. The operator is [Legal name], [Street address], [Postal code and city], [Country]. Replace every bracket before this page is treated as a policy.

What is stored

An account stores the email address, a password hash, a password salt, and the time the account was created. The password itself is not stored. A session stores a hash of the session token and an expiry. An API key stores a prefix, the name you gave it, the scope, a hash of the secret, the time it was created, and the time it was revoked if you revoked it. The full key is shown once and is not stored.

What appears in an image address

The barcode value is part of the image address. A successful picture whose address includes a key can be cached for one year. The origin access log records the path, the status, and the duration. It does not record the query string. A network or a CDN in front of the origin may log the full address, and that address includes the value. Do not put a private URL in a barcode.

How long it is kept

The account, including revoked keys, stays until you delete the account. A session lasts 30 days. An expired session is deleted. The origin does not keep a durable copy of a picture. A CDN copy of a successful address that includes a key can remain for up to one year after the account is gone.

How to delete an account

Sign in, open Account, and submit the password under Delete this account. That removes the user, the sessions, and the API keys. It does not remove a picture a CDN already cached. Password reset by email is not configured. Email [email protected].