Privacy policy

1. Your photos stay on your device

Your photographs, their EXIF metadata and any logo you add are processed locally in your browser. They are not uploaded to us. Location is hidden by default and is shown on the image only if you turn it on. Original EXIF and GPS data are not copied into exported images.

2. Data we collect

Account: if you sign in, we receive your Google account email address and a user ID through our authentication provider. We do not receive your Google password.

Orders: if you buy Pro, we store the order amount, currency, payment and refund status, and reference IDs from our payment processor. Card details are entered on the payment processor’s page and never reach us.

Technical data: our hosting and network providers process request logs (such as IP address, browser type and the pages requested) to deliver and protect the website.

On your device: optional drafts are kept in your browser’s IndexedDB for 24 hours, and saved presets stay in your browser until you remove them. This data is not sent to us.

3. How we use it

We use this data only to provide your account and Pro access, process payments and refunds, prevent fraud and abuse, answer support requests and meet legal obligations. We do not sell personal data, do not use advertising trackers and do not use your data for marketing without your consent.

4. Cookies

We use only essential cookies that keep you signed in and secure your session. We do not use analytics or advertising cookies.

5. Service providers

We share data only with providers that run the service for us: Google (sign-in), Supabase (authentication and database), our payment processor (checkout, payments and refunds) and Cloudflare and our hosting provider (website delivery and security). Each may process data only on our instructions or under its own privacy policy as a payment or identity provider. Some providers may process data in countries other than yours, with appropriate safeguards.

6. How long we keep it

Account data is kept while your account exists and deleted within 30 days after you ask us to delete it. Order and payment records may be kept for up to 7 years where tax, accounting or anti-fraud rules require it. Server logs are kept for a short period, normally no more than 30 days.

7. Your rights: access, correction and deletion

You have the right to access the personal data we hold about you and receive a copy of it, to correct it, and to ask us to delete it and your account. Depending on where you live you may also have the right to object to or restrict processing, to data portability, and to withdraw consent.

To make a request, email support@camerawatermark.com from the email address of your account. We may ask you to confirm your identity, and we respond within 30 days. Deleting your account removes your Pro access; records we are legally required to keep are retained only for that purpose. There is no charge for these requests.

You can see your orders at any time in Account → Orders & purchases. Data stored only in your browser can be removed by clearing the saved draft in your account, deleting presets, or clearing your browser’s site data.

You may also complain to the data protection authority where you live.

8. Children

The service is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

9. Security and changes

Connections are encrypted with HTTPS, access to account and order data is restricted, and payments are handled by our payment processor. No system is perfectly secure, but we work to protect your data. If we change this policy, we will update the date below and announce material changes on the website.

10. Contact

For privacy questions or requests: support@camerawatermark.com.