Privacy Policy.

Light Leak Club (“Light Leak Club”, “we”, “us”) is a service for cataloguing cameras, tracking their value and sharing film photography. The service is operated by [OPERATOR / LEGAL ENTITY, ADDRESS]. We are the controller for the personal data described in this policy.

For any privacy question or request, contact us at [CONTACT_EMAIL].

Account & profile. When you register we process your email address, a username and — if you add it — your Instagram handle. Guests can use parts of the app with a randomly generated device identifier instead of an account.

Your content. Photos you upload (together with the camera, film and caption details you attach) and the albums and collections you create. Photos are reviewed before they can appear publicly.

Usage & diagnostics. With your consent, we use analytics and crash-reporting to understand how the app is used and to fix problems. You can grant or withdraw this consent in the app; your choice is stored with your account.

Notifications. If you enable push notifications, we store a push token so we can send you relevant updates.

Pre-launch interest. On this website, tapping a “get the app” badge before launch records that someone is interested, which store was tapped, the device type and which page the click came from. This is used in aggregate to gauge demand; it does not identify you.

Website analytics. On this website we use Google Firebase Analytics (Google Analytics 4) to understand how the site is used — but only if you accept this in the cookie banner. If you accept, Google sets analytics cookies (e.g. “_ga”) and we receive aggregated usage statistics such as pages visited, approximate location and device type. If you decline, no analytics code is loaded at all. You can change your cookie choice at any time on this page.

Technical data. Like most online services, our servers automatically receive technical information such as IP address, device/browser type and timestamps when you use the app or website.

We process your data to provide and secure the service and your account (performance of a contract), to enable features you choose such as public sharing and notifications, to understand and improve the product where you have given consent, and to comply with legal obligations. Where we rely on legitimate interests (e.g. keeping the service secure and measuring aggregate demand), we balance those interests against your rights.

Publishing a portfolio or an album makes the included approved photos and the associated camera, film and credit information publicly accessible on a shareable web page, and such pages may be indexed by search engines or previewed on social platforms. You can switch a portfolio or album back to private at any time; the public page then stops being served. Cached copies on third-party platforms may persist for some time outside our control.

We rely on trusted providers who process data on our behalf, including Google Firebase (authentication, database, file storage, hosting, analytics and crash reporting) and our push-notification delivery provider. These providers act as processors under appropriate agreements and only process data as instructed by us.

Some of our providers may process data outside your country, including outside the EEA. Where that happens we rely on safeguards such as the EU Standard Contractual Clauses or an equivalent transfer mechanism.

We keep your account data for as long as your account exists. When you delete a photo, an album or your whole account, we delete the associated content from our active systems; residual copies in backups are removed in the normal backup-rotation cycle. Aggregated, non-identifying statistics may be kept longer.

Subject to applicable law (including the GDPR), you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. You can edit your profile and delete your photos or your entire account directly in the app, or contact us at [CONTACT_EMAIL]. You may also withdraw consent at any time and lodge a complaint with your local data-protection authority.

We use technical and organisational measures appropriate to the risk to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The service is not directed to children under the age required by your local law to consent to data processing, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. We will revise the “last updated” date above and, for material changes, provide a more prominent notice.