Privacy Policy – FotoFlow

FotoFlow is committed to protecting your personal data. This policy explains what we collect, why, and your rights under the GDPR.

What we collect

Gallery access and photos

When you open a gallery link you provide a unique access code. We use that code to retrieve the digitized film images your lab has uploaded on your behalf. The photos themselves are stored securely and are accessible only to you and the lab.

Print order details

When you place a print order we collect your name, email address, and optionally your phone number. Depending on the delivery method you choose, we may also collect a delivery address (street, apartment, postal code, city, country) or a parcel locker location. We also store the print specifications you configured (sizes, quantities, paper type, crop settings, and any per-print notes).

Transactional emails

We send order confirmation and gallery access emails to the address you provide. Basic delivery metadata (whether an email was sent and its message ID) is stored so we can confirm dispatch and troubleshoot delivery issues.

Feedback reports

If you choose to submit feedback through the in-app form, we collect your written description and the following technical context to help us reproduce and fix issues:

Browser name and version
Operating system
Screen resolution
The URL of the page you were on when you submitted the feedback
Gallery code, if you were viewing a gallery at the time
App version and deployment environment (e.g. Production)
An optional screenshot you attach yourself

Feedback submission is entirely voluntary. No feedback is collected passively.

Anonymous analytics

With your permission we collect anonymous page-view data through Vercel Analytics. This does not include any personal identifiers. You can accept or decline this when the cookie banner appears, and change your choice at any time on our Cookies page.

How we use it

To display your digitized film images in your private gallery
To process and fulfill your print orders
To send you order confirmation and status updates by email
To investigate bugs and improve the service using feedback reports
To understand overall usage patterns using aggregated, anonymous analytics

We do not sell your data, use it for advertising, or share it with third parties except as described in the section below.

Service providers

FotoFlow uses a small number of trusted third-party providers to operate the platform. These include services for hosting and infrastructure, database storage, file storage, transactional email delivery, and internal tooling. Each provider processes data only as necessary to deliver their service and is bound by appropriate data processing agreements. All core infrastructure is based in the European Union or under EU-adequate data protection frameworks.

Cookies and browser storage

We store your cookie preference in your browser's local storage (not a cookie) under the key fotoflow_cookie_consent. This is strictly necessary to remember your choice and is never sent to our servers. If you accepted optional cookies, Vercel Analytics may set short-lived session cookies for anonymous page-view tracking. See our Cookies page for full details and to change your preference.

Data retention

Your photos and order information are kept only for as long as necessary to deliver the service and meet our legal obligations. Galleries that have not been accessed for an extended period may be automatically removed in accordance with our retention policy. Feedback reports are retained to support ongoing product improvement but contain no data that identifies you personally beyond what you choose to include.

You may request deletion of your personal data at any time by contacting us at support@fotoflow.eu. We will respond within 30 days.

Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict certain processing
Withdraw consent for optional analytics at any time

To exercise any of these rights, email support@fotoflow.eu.

Contact

FotoFlow is operated from Estonia, EU. For any privacy-related questions contact support@fotoflow.eu.