Privacy Policy
Last updated October 29, 2026
What we keep
Your account: your name, email address and a scrambled (hashed) password. If you sign in with Google, we receive only your name, email address and Google's confirmation that the email is yours. We don't get your Google password, contacts, photos or anything else from Google.
Your libraries: the photos, notes, voice recordings, tags, guest book entries and book titles you and your family add, and the names given to each PIN.
Donations: handled by Stripe. We see the amount, your email and the name you choose to show; we never see your card number. About a year after a donation we send one email asking if you'd like to donate again; it has a link to stop these.
Security records: wrong PIN tries by network address, kept a day, so we can block guessing.
What we don't do
No ads, no tracking cookies, no analytics companies, and we never sell or share your information for marketing. Libraries are hidden from search engines and every visitor needs a PIN. Photo links stop working within two days.
Who helps us run it
Cloudflare (hosting and photo storage), Stripe (donations), Resend (sending email) and Google (only if you choose Google sign-in). They handle data only to provide their service to us. To show book covers on a library's shelf, we look up the book titles on Open Library; no other information is sent.
We email you to confirm your address, reset passwords and about your library. The weekly "On this day" email is opt-in, and every one has an unsubscribe link.
How long we keep it
Unconfirmed sign-ups are deleted after 7 days. Deleted photos are erased after 30 days in the trash. Everything else stays until you delete it or ask us to delete your account, which we do within 30 days of your email.
Your choices
You can see or delete your photos in your library at any time. To get a copy of your account information, correct it, or have it deleted, email hello@familyphotomaze.com.
Children
Accounts are for adults. Families may add photos of their children; those photos are only visible to people with the library's PIN and are never used for anything else.
See also our Terms of Service.
Need help? Email us