Security
Six things we take seriously.
EU-only data residency
All persistent data — account records, images, client gallery data — lives exclusively in the European Union. Application servers in Germany; media in Cloudflare R2's EU-restricted region.
Encryption everywhere
TLS (HTTPS) on every connection. At-rest encryption on R2 storage. Automated encrypted backups cycled out after 30 days.
Short-lived signed URLs
Every image URL is an HMAC-signed token that expires after approximately one hour. No scraping, no enumeration, no external hotlinking.
WAF + invisible CAPTCHA
Cloudflare's web application firewall inspects inbound traffic. Turnstile (invisible CAPTCHA) gates sign-in, sign-up, contact, and promo validation against automated abuse.
Bcrypt passwords
Passwords hashed with bcrypt. Sign-in attempts throttled per-email and per-IP; gallery password attempts locked out aggressively with photographer notification at 5 failures.
No AI training on your work
Your images are processed only to operate the Service. We never share them with AI trainers, advertising networks, or analytics vendors. Period.
Sub-processors.
Three carefully scoped third parties, each under contract, all covered by the EU-US Data Privacy Framework with Standard Contractual Clauses.
| Provider | Purpose | Location | Framework |
|---|---|---|---|
| Stripe | Payment processing | United States | EU-US DPF + SCCs |
| Sentry | Error monitoring (no content) | United States | EU-US DPF + SCCs |
| Cloudflare | R2 storage, CDN, WAF, Turnstile | United States (R2 in EU region) | EU-US DPF + SCCs |
Uptime
Target 99.9% monthly uptime. Current status and component health at /status.
Backups
Automated encrypted backups. 30-day retention window. Databases snapshotted nightly; media checkpointed continuously in R2.
Plugin tokens
The Skerper Lightroom plugin receives a scoped API token bound to your account. Revoke at any time from Settings → Skerper; takes effect immediately.
Responsible disclosure
Think you've found a vulnerability? Email [email protected] with details. We reply within one business day and never retaliate against good-faith research.
Limits of "secure".
No system is completely immune to risk. We apply industry-standard controls, stay current on vulnerabilities, and will notify you promptly of any incident affecting your data. You are responsible for your own credentials and for keeping a backup of anything truly irreplaceable.
Questions? [email protected]. Or read the Privacy Policy and Terms of Service in full.