Legal

Privacy policy

Last updated 27 July 2026

Your photographs

Uploaded images are stored so we can lay out, print and — if needed — reprint your book. They are deleted 90 days after delivery, or 90 days after a project is last touched if you never order. The window exists only so a reprint is possible.

They are never used for marketing, never used to train machine-learning models, never sold, and never shared other than with the production and delivery partners who physically handle your book.

What else we collect

• Account: your email address, and a password hash if you set one.
• Orders: delivery addresses, order contents, and the amount paid. Card details go straight to our payment processor and never touch our servers.
• Samples and proofs: the postal address you gave us, kept only until it ships.
• Usage: aggregate page and funnel events, used to find broken steps. No third-party advertising trackers run on this site.

Contributed photographs

If you add photographs through somebody's share link, we store the images and the name you type, and nothing else — no email address, no account, no cookie that follows you. They are visible only to the person making that book, and deleted on the same 90-day schedule.

Cookies

A session cookie so a signed-out visitor can build a book and keep a cart, a CSRF cookie for form security, and a language preference. That is the complete list; there is no advertising or cross-site tracking.

Your rights

You can download your data, correct it, or delete your account and everything in it from your account page — no support ticket required. Order records are retained in anonymised form where tax law requires it.

Contact

Any question about your data, or a request to exercise any of the above: contact us.