Privacy & Cookie Notice

Privacy matters here.

Diptych is a shared photo archive. We keep this notice short so you can understand what the service needs to work.

Information we use

We store the information needed to run Diptych: your email, password hash, nickname, invite code, partner relationships, daily frames, uploaded photos, upload time, and basic photo metadata when available.

Cookies

Diptych uses necessary cookies to keep you signed in, remember trusted devices for up to 30 days when enabled, protect forms from abuse, and maintain secure sessions. These cookies are required for core features. We do not use advertising cookies or third-party tracking cookies.

Photos and location

Uploaded images are compressed into display JPG files to reduce file size. The current upload limit is 5 MB after browser-side compression. Original camera files are not intentionally preserved when the compressed display version is saved.

Location can come from photo metadata or, if you grant permission, from your device at the time you choose or take a photo. Diptych may store coordinates and a city or place label so location can appear under the frame. You can deny location permission and still use the photo features.

Visibility and deletion

Archives are private by default unless you choose to make an archive public. If one partner deletes their account, the other partner can still view the shared archive. If both partners delete their accounts, the shared archive is retained for 30 days and then permanently deleted.

If you sign up or log in again with the same email during the retention period, your account can be restored. After permanent deletion, the account, frames, and uploaded photos cannot be recovered.

Administration

Authorized administrators can view operational statistics and may delete user accounts or frames when needed for support, safety, or maintenance. Administrator actions are recorded in an internal action log with the actor, action, target, time, IP address, and browser information.

Security and limits

Passwords are stored as hashes, not plain text. Uploads are limited by file type and size. Supported formats are JPG and PNG on the current server, with WebP only when server support is available.