This page explains what stillfrm stores, why, and for how long. The short version: as little as possible, on our own server, and nothing is shared with advertisers or trackers.
Visitors
- No tracking cookies, no third-party analytics. To count visits we keep an anonymous visitor code made from your IP address, browser and the date, scrambled with a secret key. It changes every day and can’t be traced back to you. Your IP address itself isn’t stored.
- From your IP we look up your country, on our own server (no outside service), for the photographers’ statistics.
- Likes are remembered in your own browser (local storage), so the heart stays filled for you. The server only sees a scrambled code.
- If you write to a photographer, your name, e-mail and message go to them — into their inbox on the site and to their e-mail address — so they can reply. They’re kept until the photographer deletes them.
- If you report something, we keep the report and an anonymous code to prevent duplicates.
Photographers
- Your e-mail address and a scrambled form of your password (bcrypt) — to log in, confirm your address and reset your password.
- What you choose to publish: name, username, portrait, bio, albums, captions and photo details.
- A session cookie while you’re logged in. It’s needed for logging in and isn’t used for anything else.
- When you joined and last logged in.
Where and how long
- Everything is stored on our server in the European Union (Hetzner, Finland). E-mail is sent through our mail provider.
- Visit statistics are anonymous and kept as long as the site runs. Database backups are kept for 14 days.
- Sign-ups that are never confirmed are erased after 7 days. Deleted accounts — with every photograph and message — are erased 30 days after you ask.
Your rights
You can see, correct, download and delete your data yourself from your studio (Profile and Account). Under the GDPR you may also object to processing or complain to your data protection authority. For anything else, use the contact form on the front page.