EARLY PRODUCT PREVIEW
Privacy & browser storage
This version is a product preview. Photographers can request a studio during the approval-based pilot. Automated billing, advertising and AI processing are not enabled.
Album access and records
The album engine uses email verification and, where configured, a six-digit album code. It records verification, favorites and download requests to provide those features. Optional analytics include photo opens, browsing interactions and estimated viewing time, only when you allow them. Audit records exclude passwords and verification codes. Administrators can review activity by album.
Cookies and local storage
Necessary cookies support secure sessions, administrator sign-in, remembered album access and your privacy choices. Album access lasts up to seven days. Admin sessions last two hours, or seven days when “Remember me” is selected. Appearance preferences and optional analytics can be declined below. AlbumChapters choices apply to this site and browser.
The website and database are hosted by Hostinger. Photos use private Cloudflare R2 storage and signed media links. Email verification requires the configured email provider; guest publication is blocked until it is configured. No advertising or third-party analytics identifiers are configured.
| Browser item | Purpose | Lifetime |
|---|---|---|
CHAPTERSESSID | Security, CSRF protection and pending verification | Browser session |
pa_studio_login | Photographer account sign-in | 2 hours; 7 days with Remember me |
pa_admin_login | Separate platform administrator sign-in | 2 hours; 7 days with Remember me |
pa_<album-id> | Verified guest access, scoped to the studio’s album path | Up to 7 days, limited by album expiry |
ac_privacy | Your cookie choices | 1 year |
portfolioPalette local storage | Appearance preference, when enabled and consented | Until cleared or consent withdrawn |
Sign-in and album access cookies are Secure, HttpOnly and SameSite=Lax in production. Optional analytics use consent before recording engagement; no third-party analytics provider is configured in this preview.
Photographer accounts
Studio sign-in uses verified email codes. We store studio profiles, team memberships, plan settings and usage. Platform administrators can review that metadata and album usage; the platform dashboard does not offer photo viewing or downloads. Your studio contact information and listed albums appear on your public studio page when your studio is active.
Retention
Photo expiry is separate from deletion. Album email and activity records are kept for 90 days after expiry, then reviewed for deletion. This review does not automatically erase them. Album metadata is retained. Automatic photo archive deletion remains disabled.
California privacy choices
This preview has no advertising integrations or configured sale or sharing of personal information for cross-context behavioral advertising. Global Privacy Control and Do Not Track disable optional analytics. You can change optional choices at any time using Cookie settings.
Before a public launch
A product-specific privacy notice, operator contact, account terms and a request process need to be finalized before onboarding customers. New studios require platform approval before they can upload or publish albums.