Privacy policy

What we collect

• Account: your email address and display name. If you sign in with Google, Google gives us your email address and first name, and nothing else.
• Sign-in: a record of each signed-in device (device type, when it signed in and when it was last used). We store only a hash of the sign-in code, never the code itself.
• Photos you upload: the file, when it was taken, your CC BY choice and how you lined it up with the old photo.
• Location: only if you allow it, and only while uploading. It is used to work out the distance from the spot, so reviewers can check the photo is from the right place. It is never shown publicly.
• Photo reports: only the reason, with nothing about who reported.
• Usage data: only if you agree to statistics cookies (see below).

Before upload, the site shrinks the photo in your browser, which removes its embedded data (EXIF), including GPS location. For formats the browser can't process, the original file is kept as it is.

What is public

An approved photo is shown on the site with your display name and the month it was taken. Your email address and exact location are never shown.

Why we use it

• To sign you in and keep you signed in.
• To show and review the photos you upload, and to credit you for them.
• To send messages about your account, such as a sign-in link or the result of a photo review. We don't send marketing email without your explicit consent.
• To protect the site from abuse.

Who we share it with

• Cloudflare: hosts the site, its database and the photos, and sends our emails. Its servers are around the world.
• Google: if you choose Google sign-in, and, if you agree, Google Analytics.
• Authorities: when the law requires it.

We don't sell or rent personal data.

Cookies and browser storage

• pp_session: keeps you signed in. Necessary.
• pp_oauth: needed for ten minutes during Google sign-in. Necessary.
• pp_theme: remembers whether you chose light or dark mode.
• pp_consent (browser storage): remembers your choice about statistics cookies.
• Google Analytics: loads only if you press "Accept" in the cookie banner, with IP addresses partly masked. It helps us understand how many people use the site and which pages.

To change your choice, clear this site's data in your browser and the banner appears again.

How long we keep it

Your account and photos are kept until you ask us to delete them. Sign-ins last until you sign out. Sign-in links expire after 20 minutes. Server logs are kept by Cloudflare for a short time.

Your rights

Under Israel's Privacy Protection Law you may see the data we hold about you, ask for it to be corrected, and ask for your account and photos to be deleted. Write to privacy@paampo.com and we'll handle it within 30 days.

Security

The site only works over an encrypted connection (HTTPS). Sign-in codes are stored only as hashes, the back office is limited to staff, and risky file types (such as SVG) are refused on upload.

Children

You must be 16 or older to upload photos. We don't knowingly collect data about children under that age.

Changes and contact

We'll update this policy as needed and change the date at the top of this page. We'll announce significant changes on the site.

Privacy questions and requests: privacy@paampo.com.