Privacy Policy

1. Who We Are

picr.app ("we," "us," or "our") operates the picr.app photo gallery platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: When you register, we collect your email address, display name, and password. Passwords are never stored in plain text — they are hashed using industry-standard PBKDF2 with a unique salt per account.
• Profile picture: If you choose to upload a profile photo, it is stored on our servers and displayed only within your account.
• Photos and albums: All images you upload and any album names, descriptions, and titles you create are stored on our servers.
• Contact messages: If you contact us, we retain your message and email address to respond and improve our service.

2.2 Information Collected Automatically

• Usage data: We may log standard server access data including your IP address, browser type, pages visited, and time of visit. This information is used solely for security monitoring and service improvement.
• Cookies: We use session cookies to keep you logged in between page visits. See Section 5 for full cookie details.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your sessions.
• Store and display your photos and albums as you have organized them.
• Respond to your support requests or inquiries.
• Monitor service performance and detect security threats.
• Serve relevant advertisements through Google AdSense (see Section 6).
• Comply with applicable laws and regulations.

We do not sell, rent, or trade your personal information or photos to any third party for marketing purposes.

4. Data Sharing and Disclosure

We do not share your personal data except in the following limited circumstances:

• Service providers: We may use trusted third-party services (such as hosting providers) that process data on our behalf under strict confidentiality agreements.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfer: If picr.app is acquired or merged, your information may be transferred as part of that transaction. We will notify you before any such transfer occurs.

Your photos are private by default. They are not indexed by search engines and are not accessible to other registered users.

5. Cookies and Tracking Technologies

picr.app uses the following types of cookies:

• Session cookies: These are essential for keeping you logged in as you navigate between pages. They expire when you close your browser or sign out.
• Advertising cookies: Google AdSense places cookies on your device to serve personalized advertisements based on your browsing history. These cookies are managed by Google, not picr.app.

You can control cookies through your browser settings. Disabling cookies may affect your ability to stay logged in or use certain features of the Service.

6. Google AdSense and Third-Party Advertising

picr.app uses Google AdSense to display advertisements. Google, as a third-party vendor, uses cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.

You may opt out of personalized advertising by visiting Google Ad Settings. You can also opt out of a third-party vendor's use of cookies for personalized advertising by visiting aboutads.info.

For more information on how Google collects and uses data, please review the Google Privacy Policy.

7. Data Retention

We retain your account information and photos for as long as your account is active. If you delete your account, we will delete your personal data and uploaded photos from our active servers within 30 days. Some data may be retained in backup storage for up to 90 days before permanent deletion.

8. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. These include:

• Passwords stored exclusively as salted PBKDF2 hashes.
• Server-side file type validation on all photo uploads.
• Session-based authentication with automatic timeout.
• Regular security reviews of our codebase and infrastructure.

While we take security seriously, no system is perfectly secure. We encourage you to use a strong, unique password and to sign out from shared devices.

9. Children's Privacy

picr.app is not directed to children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us personal information, we will delete it promptly. If you believe a child has submitted information to us, please contact us at the address below.

10. Your Rights

Depending on your location, you may have the following rights regarding your data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate information via your Profile Settings page.
• Deletion: Request deletion of your account and all associated data.
• Portability: Request your data in a portable format.

To exercise any of these rights, please contact us at our contact page.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please do not hesitate to reach out:

picr.app
Email: Contact form