Privacy Policy

What We Collect

When you use Remina, we process the photos you upload — which may contain faces and personal moments. Your photos are stored on Cloudflare R2 (object storage) while we generate your composition. We also store a session identifier (a random code held in a cookie) to keep your work together. If you choose to receive a download or recovery link, or opt in to a "your print is ready" email, we collect an optional email address for that purpose only.

Why We Collect It

We collect your data to generate your print-ready composition and deliver it to you. The legal basis is contract performance: you've asked us to make something for you, and we need your photos to do that. We do not sell your data, we do not build advertising or marketing profiles, and we never use your photos to train models. The only analytics we run are cookieless and aggregate (see "Analytics" below) — we do not profile individual visitors.

Who We Share It With

We share your data only with the processors we need to run the service, and only for that purpose:

• Cloudflare — hosts our infrastructure and stores your photos and print files on our behalf.
• Stripe — processes your payment. Stripe never sees your photos.
• Pirsch — cookieless, aggregate website analytics (a sub-processor). Pirsch counts pageviews and journey steps without cookies and without identifying you.
• Sentry — error monitoring. When something breaks, Sentry helps us diagnose it. Photo content and on-screen text are masked before anything is sent (see "Error Monitoring" below).
• Resend — sends the transactional emails you ask for (download / recovery / print-ready links). We use it only when you provide an email.

We do not sell your data and we do not use advertising networks. No other third parties have access to your information.

Analytics

We use Pirsch, a privacy-first, cookieless analytics service, to understand how many people visit Remina and where the journey from upload to print-ready gets stuck. Pirsch does not set cookies, does not store a device identifier in your browser, and does not track you across other websites. The data it collects is aggregate and cannot be used to identify or profile you as an individual. Because it is cookieless and stores nothing on your device, no cookie-consent banner is required.

Error Monitoring

We use Sentry to capture technical errors so we can fix them. If an error occurs, Sentry may record a short replay of what happened on screen — but we configure it to mask all text and block all images and media, so your uploaded photos and any text (including your email) are not captured. This lets us debug layout and interaction problems without exposing your personal content. We do this on the legal basis of legitimate interest in keeping the service working.

How Long We Keep It

If you do not complete a purchase, we keep your photos, compositions, and session data for 14 days from your last activity, after which everything is permanently and automatically deleted by a scheduled cleanup job. If you have paid, your print file is retained for up to 12 months so you can re-download it, and is then automatically deleted; your payment record is kept longer where the law requires (e.g. tax and accounting). These retention periods are enforced automatically — you do not have to do anything.

Your Rights

If you are in the EU/EEA (or the UK), the GDPR gives you the right to access, correct, export (data portability), restrict, or object to our processing of your personal data, and the right to erasure ("right to be forgotten"). You can also lodge a complaint with your local data protection authority.

You can delete all your data at any time using the "Delete my data" option available throughout the Remina experience — this immediately and permanently deletes your photos, compositions, and session data (you do not need to wait the 14 days) and removes the email captured at checkout. If you no longer have an active session (for example you contact us by email after paying), send an erasure request to the contact address below and we will locate your records by your email address and erase them.

Cookies

We use a single session cookie (HttpOnly, Secure, SameSite=Strict) to identify your session. There are no tracking cookies and no advertising cookies — our analytics are cookieless. The session cookie expires when your session ends or after 14 days, whichever comes first.

Contact

If you have any questions about how we handle your data or wish to exercise your rights, please contact us at the address provided in the app. We will respond within 30 days.