Last Updated: 26 April 2018
All that information you're entering about your rolls of film and your cameras, oh, and your email address, those will never be shared with anyone in so much as I can control. Never. Never ever (except as stated below for backing up the data, or as required by law enforcement or for any legal reason). Also, you own the data. I don't care what your email address is or what you're taking photos of.
We store your email address so we can send you a link to reset your password if you forget it, or to send you reports about your film usage (only if you want to receive the reports though), and maybe a newsletter here or there (realistically this will probably never happen, and only it will only be available if you opt in). We use your email address as your ID too, because who wants to remember another stupid user ID on a website.
When you log in, I write your email, IP address, and the current time to a table in the database. This is to occasionally monitor if someone is trying to hack into the site via the login page. If you want a record of all the times you've logged in, let me know.
I use Google Analytics to monitor general usage of the site. The data is anonymized and cannot be tied to an individual.
I back up the database at least daily, but possibly hourly, in order to ensure continuity of services in the case of a malfunction. The backups are sent to my email and stored on Box.com. Occasionally I download them from Box.com and put them on an encrypted hard drive for long-term storage. The hard drive is then backed up to Crashplan, which is also encrypted. I take this shit as seriously as I can.
Hey you lovely Europeans (well, the ones living in EU member countries anyway), I love your privacy laws and wish we had them here in the USA (fuck Facebook, right?). Here's how we're complying with GDPR: I feel I have a contractual agreement with you (or at least legitimate interest) to store your email address for the purpose of logging into the website, and that's the only reason I store it. I will never send you marketing emails unless you opt into some marketing email I magically find the time to set up. Without your email address, there's no way you can reset your password. If you disagree with this or if you want to exercise your right to be forgotten, you can delete your account. Either log in to do it, or email us at firstname.lastname@example.org. If you want access to all your data, you can download it on the Reports page, or email us at email@example.com.
We do the best we can to prevent the loss, misuse or alteration of the information you store on this site, including encrypting your passwords, and keeping our database as secure as possible. But if your password is "password", don't blame us when all your film data disappears. Seriously, use a strong password, and use a password manager if possible. I will notify users in the case a breach ever occurs.