PicturePostIn short: PicturePost doesn’t collect your personal information. There are no PicturePost accounts, no analytics, no advertising and no tracking. Your photos stay on your device until you choose to publish them, and then they go straight to your own Cloudflare account. We never receive them.
What happens to your photos
- On iPhone and iPad, the photos and videos you choose with Apple’s photo picker are copied into PicturePost’s private storage on your device. PicturePost sees only the items you pick, not the rest of your library.
- On the Mac, PicturePost reads the folder you open and saves a small settings file (picturepost.json) in it.
- Building a gallery happens entirely on your device: pictures are resized and turned into web pages there.
- Location data is removed from the resized pictures in your galleries. If you turn on “Let visitors download originals” in the Mac app, the original files are published unchanged and may still contain location data.
Publishing
When you publish, PicturePost sends the gallery directly from your device to your own Cloudflare account, using the API token you entered. Unless you add a password, published galleries are public web pages: anyone with the address can see them. Cloudflare hosts them under its own terms and privacy policy.
If you use the Mac app’s FTP option, galleries are sent to the server you choose instead.
Password-protected galleries
If you turn on “Require a password”, only a scrambled (hashed) copy of the password is published, never the password itself. Visitors who type the right password get a cookie on that gallery’s website so they stay signed in until they close their browser. The cookie is used only to let them in. The gallery’s cover picture and its title stay visible so your home page can list it.
Passwords and tokens
Your Cloudflare API token, gallery passwords and each gallery’s signing key, and FTP passwords on the Mac, are stored in your device’s Keychain. They are only ever sent to Cloudflare or to your FTP server, to publish your galleries.
Purchases
PicturePost Pro is bought through Apple’s App Store. Apple handles the payment, and we never see your payment details. The app only asks the App Store whether you have Pro.
Information we don’t collect
PicturePost doesn’t collect, store or share your name, email address, contacts, location, photos, usage data or device identifiers, and it contains no third-party analytics or advertising code. If you’ve agreed to it in your device’s settings, Apple may share anonymous crash reports and statistics with us; Apple’s privacy policy covers those.
This website
The PicturePost app and this website are separate. If you sign up for PicturePost news on picturepost.app, we store your email address and the date you signed up so we can send you a few emails a year about PicturePost. We never sell or share it. Each email has an unsubscribe link, or you can email us to be removed. The website also keeps an anonymous count of visits that arrive from published galleries, with no names, addresses or cookies. The website is hosted by Cloudflare.
Removing your data
- From your device: delete a gallery in the app, or delete the app.
- From the web: in the Cloudflare dashboard, open Workers & Pages and delete the gallery’s site.
Children
PicturePost isn’t directed at children under 13, and we don’t knowingly collect information from anyone.
Changes
If this policy changes, we’ll update this page and the date at the top.
Contact
Questions about privacy? Email [email protected].