Privacy and security
Private by default, and by design
A client's photos are something kept, not posted. Every part of Ourfold starts from that: who can get in, what they can do, and where the files live.
Never public: no listing, and a 404 when signed out
There's no public gallery list and no gallery in search results. Anyone without access gets a page-not-found, the same answer as for a gallery that doesn't exist, so the page doesn't even confirm it's there.
Sign-in by one-time code, not shared passwords
Clients and guests sign in with a 6-digit code sent to their own email or mobile. A shared gallery password gets forwarded; a code only reaches the person invited.
- Codes work once, for 10 minutes, and are stored only as a hash
- Five wrong tries locks sign-in for 15 minutes, and requests are rate-limited
- Sessions live in a secure cookie that page scripts can't read, and can be revoked
- Photographers sign in with Google or an email code; there are no passwords at all
Who sees what
You set the most anyone can do in a gallery. Your client can tighten it for their guests, and only you can loosen it.
- Guests' favorites stay private: you and your client see totals, never who
- Albums can be shown to everyone, to your client only, or hidden while you work
- Drafts are closed to everyone outside your studio
Download limits and expiring ZIP links
Choose no downloads, web size or full resolution for each gallery, and whether ZIPs are allowed. ZIP links expire after 7 days, and photo files are only served to people with access.
Where your photos live, and the backup
Galleries are served from Cloudflare. As each original is uploaded, a copy goes to a second provider, Amazon S3 Glacier Deep Archive, under Object Lock, so the app itself can't overwrite or delete it. Our draft privacy notice says where data is stored: servers in Singapore.
No location data, no face recognition
The web-size copies in a gallery carry no EXIF data, so no GPS location. AI checks run on those copies only, never on originals, and Ourfold doesn't use face recognition.
Support sees your photos only with your permission
If you need help, you can grant one support agent access to your studio or one gallery for 24 or 72 hours, tied to your ticket. You can end it at any time, and every grant is logged.
Your studio decides, Ourfold keeps
Your studio decides how your clients' information is used; Ourfold stores it and processes it on your behalf. Clients and guests agree to the privacy notice before they see photos, and can leave a gallery at any time.
Payments: hosted checkout
PayMongo and Stripe host the checkout, so card details never reach Ourfold.
Questions about privacy
Can someone find my gallery on Google?
No. Gallery pages tell search engines not to index them, and anyone who isn't signed in with access gets a page-not-found.
Where are my photos stored?
Galleries are served from Cloudflare, and each original has a locked backup copy at Amazon Web Services. The privacy notice gives the details, including the Singapore location.
What happens when I delete a gallery?
Its photos leave the gallery storage, and its viewers' favorites and records go with it. The locked backup copies are then erased through a separate, logged process.
Give your clients a gallery they can trust
Every privacy feature is in every plan, Free included.
Free plan: 1 active gallery and 5 GB. No card needed.