EXIF StudioPrivacy policy
How local photo storage, account sessions, Stripe payments and optional first-party analytics work.
Updated1. Scope
This policy describes the current version of EXIF Studio. Contact support@exifdesk.com. Operator identity will be added before the formal commercial launch. Sample code or test configuration does not identify the legal operator.
2. Photos and local workspace
No. Parsing, editing and image generation run locally in your browser. Photos and edit drafts are stored in local IndexedDB to survive sign-in and payment returns. Use “Clear local workspace” to remove them. Account and payment APIs do not receive photos, filenames, EXIF or GPS.
The local workspace remains until you clear it, delete site data or the browser reclaims storage. On shared devices, clear the workspace before leaving. Language preferences are stored in localStorage.
3. Accounts and essential sessions
Registration stores your email, salted password hash and account creation time, never a plaintext password. Sign-in uses an HttpOnly session cookie lasting up to 30 days; sign-out invalidates it. Email verification and self-service password recovery are not currently available. Keep your password safe; signed-in users can change it and revoke other sessions.
4. Payment data
Stripe-hosted checkout processes payments. We store Stripe customer/subscription identifiers, plan, status and expiry, not full card numbers. Email and account identifiers are sent to Stripe for checkout and subscription management. Billing retention depends on operational and applicable accounting requirements.
5. Optional analytics
Only after you opt in, first-party analytics records page visits, feature events, time, counts and a daily-hashed temporary session identifier. It does not record photos, filenames, EXIF, GPS, form contents or full URL query strings. Change your choice in the footer at any time. Declining does not affect editing, sign-in or purchase. Reports read the most recent 30 days; events older than 90 days are pruned on subsequent analytics requests; aggregate reports are restricted to configured administrators.
6. Hosting and security records
Hosting infrastructure processes network-request information needed to serve the site. Account endpoints use temporary hashed source/email counters for abuse prevention; raw IPs are not stored in the analytics table. The site loads no ads, third-party analytics or session replay.
7. Local data controls and updates
Clear the workspace to remove local photos and drafts on this device, without deleting original files on disk. Disabling analytics stops future optional events. For account requests, contact support@exifdesk.com. This page’s date will be updated when processing changes.