Privacy Policy

Last updated 9 October 2026

PhotoLink turns photos and videos into a link that stops working after 12 hours. It is built to keep as little as possible, for as short a time as possible. There are no accounts, no analytics, no advertising, no tracking and no cookies.

What we store, and for how long

• The photos and videos you share, exactly as they left your phone, and their filenames. For photo formats some browsers cannot display (such as HEIC), also a JPEG preview made on your phone; for videos, a still frame to show before playback, and the video's length. When you share several as one link, also a small thumbnail of each, made on your phone, for the grid recipients see.
• Links stop working 12 hours after their upload begins. The files are deleted by an automatic hourly cleanup, and storage rules remove anything left over within 48 hours at the latest. You can delete them immediately by revoking the link in the app.
• Files are stored privately, encrypted at rest, with Cloudflare R2 in the European Union. They are never public in storage; every view goes through PhotoLink's server, which checks that the link is still valid first.

What stays with you

Your list of links, their thumbnails, the private keys that let you revoke them, and your settings are kept on your iPhone and, if iCloud is turned on, in your private iCloud account using Apple's CloudKit. We cannot access any of it.

Location and other details

Photos and videos taken on a phone usually record where they were taken. By default PhotoLink removes the location before uploading, without re-encoding the photo or video. You can turn this off in the app's settings, in which case the location is included in the file recipients download. Other details the camera records, such as the date and camera model, are kept in the original.

Who can see what you share

Anyone who has the link, until it expires. Links are long and random, and are not listed or indexed anywhere. If you paste a link into a messaging app, that app may fetch a preview image and keep it under its own privacy policy.

Service providers

The website and file storage run on Cloudflare, which processes requests and keeps standard request logs (such as IP address, the address requested and browser type) for a few days for security and operations. Cloudflare receives nothing beyond what is needed to serve what you share.

Your rights

Because PhotoLink has no accounts, we hold nothing that identifies you. You can delete anything you shared at any time by revoking its link. For any other privacy question or request, including those under the GDPR, contact contact@panagiotispetridis.com.

Children

PhotoLink is not directed at children under 13.

Changes

If this policy changes, the new version will be posted here with a new date.