Privacy Policy
Last updated June 20, 2026
This policy describes what Shutr collects, why we collect it, and how we use it. By using the service, you agree to this policy and our Terms of Service.
Who we are
Shutr is a photo-sharing service built for intentional sharing — your photos, your followers, your feed. For privacy questions or abuse reports, contact the site administrator for your deployment.
Information we collect
- Account data — username, email, password (stored as a hash), profile fields you provide (bio, city/location you type in, shoot style, avatar). Profile location is text you enter — we do not use your device GPS or browser geolocation for it.
- Content you post — photos, captions, captures, comments, and messages, with timestamps.
- Photo metadata (EXIF) — for JPEG feed posts, we may read and store camera settings embedded in the file: make/model, lens, focal length, aperture, shutter speed, ISO, date taken, and image dimensions. This is saved with the post and may appear as a small overlay on the image for logged-in viewers who can see that post. We do not read or store GPS coordinates from photo EXIF. Capture uploads do not use this metadata path.
- Security & abuse logs — IP address and browser user-agent on signup attempts, successful logins, and post uploads; failed login attempts may be logged with the username or email tried.
- Moderation records — admin actions (e.g. bans, deletions, post approvals) with the acting moderator and time.
- Technical data — session cookies to keep you logged in; basic server logs from hosting.
How we use it
- Run the service (feeds, profiles, messages, notifications).
- Keep accounts secure and prevent spam or abuse.
- Investigate Terms of Service violations and respond to valid legal requests.
- Improve reliability and fix bugs.
What we don’t do
- We do not sell your personal information.
- We do not use your photos for advertising profiling.
- We do not collect GPS coordinates from photo EXIF or request browser/device geolocation.
- Private feed preferences (mute, block, see less) are not shown to other users.
Sharing information
We may share data only when needed:
- Service providers — hosting, email, or infrastructure vendors that process data on our behalf.
- Safety & law — if required by law, court order, or to report serious illegal activity (e.g. child safety threats) to appropriate authorities.
- With your direction — content you make visible to people you follow or the public is shown to those users as part of the product.
Retention
We keep account and content data while your account is active. Security and moderation logs are kept for up to 365 days unless a longer period is needed for an investigation or legal obligation. Deleted accounts and removed content may persist in backups for a limited time.
Your choices
- Update profile and login details in account settings.
- Delete your posts anytime. Permanently delete your account from Account settings (requires your password).
- Use mute/block controls — they are private to you.
Children
Shutr is for users 18 and older only. We do not knowingly collect data from anyone under 18.
Changes
We may update this policy. The date at the top will change when we do. Continued use after updates means you accept the revised policy.