Privacy policy

Short version: we cannot see your photos, we do not know who you are, and almost everything deletes itself.

Who is responsible

Responsible for this website and the sharing service of the Family Photo Puzzle app:

What this service does

When you share a puzzle from the app, the app uploads an encrypted file to this server and creates a link. Recipients open the link, their app downloads the file and decrypts it on their device. This website also shows a short information page when a link is opened without the app installed.

End-to-end encryption

The photo and the puzzle are encrypted on the sender's device (AES-GCM) before they are uploaded. The key is part of the link after the “#” sign. Browsers and apps never transmit this part to a server. We only store an unreadable file – we cannot view, analyse or pass on your photos.

What we store and for how long

• Encrypted puzzle file: until all intended recipients have picked it up, at most 72 hours. Then it is deleted automatically. The sender can delete it earlier at any time in the app.
• Puzzle details without personal reference (number of pieces, start mode, number of recipients, file size, timestamps): 60 days after creation.
• Anonymous game progress per recipient (percent solved, play time, finished or not, timestamps): 60 days after creation. The sender sees these as “Recipient 1, Recipient 2 …” – without names.
• A random device identifier generated by the app is stored only as a hash value, so the same device can pick up its puzzle again. It cannot be traced back to a person.

IP addresses and log files

To prevent abuse, the number of uploads per internet connection is limited. For this we store a salted hash of the IP address for about one hour – not the IP address itself.

The web server may keep technical log files (IP address, time, requested address) for a short time to ensure secure operation. The key after the “#” never appears in them.

Hosting

This website and the sharing service run on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland. The provider processes the data described here on our behalf as a processor under a data processing agreement (Art. 28 GDPR).

Cookies, tracking, third parties

This website sets no cookies, uses no analytics or advertising services and loads nothing from third-party servers. Data is not passed on to third parties.

Legal basis and your rights

Processing is based on Art. 6(1)(b) GDPR (providing the sharing function you asked for) and Art. 6(1)(f) GDPR (secure operation and abuse prevention).

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and you can lodge a complaint with a data protection supervisory authority. Because we store no names or accounts, we can usually only find data with the help of your puzzle link. Contact details are listed above.