Privacy Policy

1. Information we collect

We do not secretly collect information beyond what is listed here. We do not collect advertising behavior histories, continuously track location, read device contacts, or install analytics or advertising tags.

• Account data: email address, hashed password, display name, and bio.
• Uploaded media and metadata: filename, format, size, capture time, dimensions, duration, and tags. Capture time comes from EXIF when available, otherwise upload time is used.
• Albums and memberships: names, descriptions, members, permissions, invitations, and join times.
• Comments: text, author, and posting time.
• Friend relationships and the time they were established.
• Online status.

2. Photos, videos, and faces

Media may contain identifiable people and is treated as personal data.

• We perform no facial recognition, person identification, automatic tagging, or content analysis.
• Uploaded media is never used to train machine-learning models.
• Only members of an album can view its media.

3. How information is used

Information is used only to provide the Service: authentication, access control, storage and display, album notifications, and responding to inquiries.

4. Who can see information

• Album media and comments are visible only to that album's members.
• Display name, bio, and online status are visible to friends and fellow album members. Online status can be hidden in settings.
• Email addresses appear in friend-search results but are not otherwise public.
• There are currently no public albums or links viewable by anyone with the URL.

5. Disclosure to third parties

We do not sell, rent, or provide user information to advertisers, data brokers, analytics providers, or other third parties, except when disclosure is legally required.

6. Storage and retention

• Data is stored in the Service's operating environment; original media is not entrusted to external cloud storage.
• Data remains until a user deletes it and is not automatically removed after a fixed period.
• Backups are made for disaster recovery and used for no other purpose.

7. Deletion — important

Deletion is immediate and permanent, without a trash folder, archive, or grace period. Confirmation is always required, and deleting an album requires entering its name.

• Deleting media removes its file, metadata, and comments together.
• Deleting an album removes all media, comments, and membership data, including content posted by others.
• Users cannot undo deletion.
• Manual recovery from a backup after accidental deletion is not guaranteed.

8. Your rights

• Access: export profile, settings, friends, memberships, and album contents as JSON.
• Correction: change your display name, bio, album names, and descriptions.
• Deletion: delete media, comments, and albums immediately and permanently.
• Withdrawal: leave an album from its settings.

9. Security

• Passwords are stored as salted hashes and cannot be recovered by operators.
• Browser communications use HTTPS encryption.
• Album authorization is enforced by the server, even if an unauthorized control appears in the interface.

10. Cookies

We use only a session cookie to keep you signed in. There are no advertising or analytics cookies.

11. Children

Minors must obtain a guardian's consent and remember that media may show people other than the uploader.

12. Policy changes

Changes update the date on this page, and material changes are also announced in the application.

13. Contact

Contact the Service operator with questions about this policy or personal data. TrulyUs is an educational ft_transcendence project for 42 Tokyo and is not operated as a commercial service. Please also review the Terms of Service.