Privacy

What this server stores about you, and why.

Last updated 10 September 2026

This is a private server run by one person for their household and a few friends. It is not a business and there is no commercial interest in your data. This notice describes what actually happens, in plain terms.

What is collected when you sign in

Signing in is handled by Google or Microsoft. When you choose one of them, they tell this server three things:

• your email address
• your name, as it appears on that account
• an identifier that lets the server recognise you next time

Your password is never sent to this server, and it is never seen or stored here. If you use two-factor authentication on your Google or Microsoft account, that continues to protect this sign-in too.

What it is used for

Only to work out who you are and which applications you are allowed to open. Nothing else. There is no advertising, no analytics, no tracking, and no profiling.

Creating an account grants no access by itself. Permissions are added by hand, per application.

What else is stored, if you are given access

• Photo library. If you are given access to the photo application, the photos and videos you upload are stored on the server, along with the information the application derives from them — dates, locations recorded by your camera, and detected faces. You can delete your own content from within the application.
• Server logs. The web server records requests, including IP addresses, so that faults can be diagnosed. These are kept on the machine and are not sent anywhere.

Cookies

One cookie, to keep you signed in so you are not asked to log in on every page. It expires after thirty days. There are no advertising or tracking cookies, and no third-party cookies.

Who can see it

The person who runs the server, and nobody else. Your details are not sold, shared, published, or passed to any third party. There is no third-party analytics or hosting provider involved — the machine sits in a private home in the United Kingdom, and the data stays on it and on backup storage in the same house.

Photos you place in a shared album are, of course, visible to the people you share that album with.

How long it is kept

Your account and its content are kept until you ask for them to be removed, or until the person running the server removes your access. Backups are kept for up to a month, so deleted data may persist in a backup for that period before ageing out.

Your choices

You can ask, at any time, for a copy of what is held about you, for it to be corrected, or for your account and content to be deleted. There is no form and no process — just send an email and it will be done.

You can also revoke this server's access from your Google account permissions or your Microsoft account permissions page at any time, which stops future sign-ins immediately.

Contact

Jack Lodge — jacklodge2@gmail.com.