Privacy

Staregram is run by Powell Lines LLC, [Registered address]. We decide what happens to the information described here (in GDPR terms, we are the controller). Reach us at support@staregram.com or through the support page.

When you upload a picture we immediately decode it and write a brand new file from the pixels. Two consequences follow, both deliberate:

• EXIF metadata does not survive. Camera model, timestamps and - most importantly - GPS coordinates are discarded. We use the orientation tag to turn the photo the right way up and then throw it away with the rest.
• We never store or serve the bytes you sent us. Only our re-encoded version exists, which also means a file with something hidden appended to it cannot be served back out of our storage.

Your original photo is never shown to anyone but you, even when you share the picture made from it. A shared picture exposes only the stereogram, a small thumbnail and its depth map (the Reveal).

We use a small number of providers, each only for the job listed:

• Fly.io - hosts the servers that run Staregram and its database. Depth estimation normally runs here, on our own server, not through a third-party AI service.
• Cloudflare R2 - stores the image files: your re-encoded uploads and the pictures, depth maps and patterns made from them. The bucket is private; every file is served through our own site, which checks who may see it.
• Stripe - takes payments, and sells the credit packs as the merchant of record, which means it works out and pays the sales tax or VAT on them. To do that it asks for your name and billing address at checkout. Card details go straight to Stripe and never reach our servers. We keep what a purchase was for, what it cost, and Stripe's reference for it.
• Resend - sends our emails: sign-in links and codes, receipts and replies to support messages. It receives your email address and the message.
• Replicate - only when one of two optional features is switched on, and only for that one request. If our own depth model is unavailable, the photo is sent to a hosted copy of the same model to work out its depth. If you ask for an AI-made pattern, the words you typed are sent to generate it (no photo is sent for that). Every picture's recipe panel says which depth model was used.

Two more, each only when we have switched it on:

• Plausible Analytics - counts visits. It sets no cookies and builds no profile of you; we see page views, totalled.
• Sentry - receives a report when something breaks: the error, the page and the browser type. It sets no cookies and is not sent your email address.

• Your email address. That is the entire account - there is no password.
• A display name, if your account has one.
• The images you make, their settings, and the derived depth and pattern files.
• Your credit balance and a line for every credit that moved, so billing is auditable.
• Support conversations you start.
• Coarse technical records: IP address and browser type against sign-in sessions and sign-in attempts, used for rate limiting and investigating abuse.

Nothing, until you choose to share. An image is private until you press Share to gallery, and you can take it back out at any time. A shared picture shows its title and the display name on your account; with no display name it says “A Staregram fan”. Your email address is never shown, in whole or in part.

• Pictures made without an account are deleted, files and all, 30 days after you last changed them - unless you sign up first, in which case they move into your account.
• Your account and everything in it - pictures, credits, purchase records, support conversations - is kept until you delete it or ask us to.
• Sign-in sessions (with their IP address and browser type) are deleted when they expire, 60 days after you sign in, or when you sign out. Sign-in links and codes stop working after 15 minutes and are deleted once expired.
• The anonymous visitor record behind the guest cookie expires after 30 days and is then deleted.
• Payment notifications from Stripe are kept for 30 days, in case Stripe needs to resend one.
• A log of emails we sent (to whom, which kind, when) and an audit log of account and admin actions (with an IP address) are not deleted on a timer today. The email log is deleted, and your email address is removed from the audit log, when your account is erased.
• Backups. The database's point-in-time recovery and our storage backups can hold deleted data for up to 30 days before it is gone for good. They exist to recover from a fault.

• We do not sell or rent your data.
• We do not train any model on your photographs.
• We do not run advertising trackers.

Deleting an image from your library removes its stored files as well as the record. To have your whole account erased, write to support@staregram.com from the address you sign in with, or use the support page. We remove every picture and file, the account itself, its credits and purchase records, likes, support conversations and the email log (backup copies age out within 30 days), and we confirm when it is done - no retention argument, no exit survey. Stripe keeps its own payment records under its own rules.

You can also ask for a copy of what we hold about you, or for something to be corrected, the same way. If you are unhappy with how we handle your data you may complain to your local data protection authority.

Two cookies, both strictly necessary, and no banner because there is nothing to opt out of:

• sg_session - keeps you signed in, for up to 60 days.
• sg_guest - identifies an anonymous visitor for 30 days after their last visit, so pictures made before signing up can move into the account afterwards.

Beyond cookies, your browser keeps one note (staregram-install-offered) so we only suggest adding Staregram to your home screen once, and a service-worker cache of the site's own files so it opens quickly and works as an installed app. Neither is sent to anyone. There are no advertising or tracking cookies.

Staregram is not meant for children under 13, and we do not knowingly hold information about them. If you think a child under 13 has used it, tell us and we will delete their data.

If this notice changes, the date at the top changes with it. Questions go to our support page, or support@staregram.com.