Privacy policy

What we collect

• Your account. Your email address, the name you give us, and a username. If you sign in with Google, we also keep the profile picture Google sends us.
• Your photos. The files you upload, as you uploaded them, including any information embedded in them such as the camera used or where the photo was taken. The copies we show on the site have that information removed.
• Reports. If you report a photo, we keep the kind of report, what you wrote, and the name and email address you gave us.
• Technical details. Your IP address and browser type are stored with your sign-in session and used to limit abuse. Our server logs record timings, errors, and the region a request came from. They do not contain your photos, email address, or what you wrote in a report.

Storage in your browser

A cookie keeps you signed in. While you upload, the photos you chose and your progress stay in your browser so you can continue after a refresh. Your browser also remembers whether your last upload was public. None of this is used to track you across other sites.

How we use it

• To run the service: store your photos, show them to the people you share them with, and keep you signed in.
• To show who posted a photo: your name, username, and profile picture appear next to your public posts.
• To keep the service safe: handle reports, limit abuse, and fix errors.

We do not sell your information or use it for advertising.

Who can see your photos

A public post appears in the feed and on your profile, and anyone can open it. A link-only post is open to anyone who has the link, but is not listed anywhere. Either way, apps and sites you share a link with may show a preview image. You can change a post between public and link-only, or delete it, from the post's page.

Who we share it with

Shotby runs on Cloudflare, which stores your account details, photos, and reports on our behalf. The database and photo storage are located in the United States. If you sign in with Google, Google tells us your email address, name, and profile picture. We do not share your information with anyone else unless the law requires it.

How long we keep it

• A post you delete disappears from the site right away. Its files are erased within 30 days.
• An upload that is not finished within 7 days is erased.
• A photo removed because it involved a child is kept, unavailable to anyone, for up to one year in case it is needed by authorities, and the account that uploaded it is suspended.
• Reports are kept for as long as we need them to handle the report and any follow-up.
• Your account and the posts you have not deleted are kept until you ask us to remove them.

Your choices

• You can change your name and username on your profile.
• You can make any post link-only or delete it.
• You can sign out from the menu in the header, which ends your session on that device.

Children

Shotby is not meant for children under 14, and we do not knowingly keep their information. If you think a photo involves a child, please report it.

Changes

When this policy changes, the date at the top changes with it. A change that affects how we use what we already have will be announced on the site first.