Last Updated: 2025-01-09
At Magicalbum, we respect and value your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our web application (“the Service”). It also outlines your responsibilities as a user regarding the data and images you upload to the Service.
You should also read the terms of service
—————
1. Data Controller
Magicalbum (“we,” “us,” or “our”) is the data controller for the personal data processed through the Service. If you have questions about how your data is handled, please contact us at privacy@magicalbum.link.
—————
2. Information We Collect
2.1 Information You Provide
We collect the following information when you use the Service:
- Account Information: Name, email address, and any other details you provide when creating an account.
- Uploaded Content: Images, videos, and other data you upload to create and share albums.
- Payment Information: If you pay for to a paid plan, we collect payment details via Stripe, our third-party payment processor. We do not store credit card information directly.
2.2 Automatically Collected Information
We collect certain information automatically when you use the Service, such as:
- Device Information: IP address, browser type, operating system, and device details.
- Usage Data: Logs of how you interact with the Service, including album sharing and viewing activities.
—————
3. How We Use Your Data
We use the collected data to:
- Provide and maintain the Service.
- Process payments (via Stripe).
- Communicate with you (e.g., account-related notifications or support requests).
- Improve the functionality and user experience of the Service.
- Enforce our Terms of Service and comply with legal obligations.
—————
4. Third-Party Service Providers
We rely on trusted third-party services to run Magicalbum efficiently:
- Stripe: For secure payment processing.
- Resend: For sending transactional emails (e.g., password resets or notifications).
- Hetzner: For hosting infrastructure and data storage.
- DigitalOcean: For additional infrastructure and server management.
These service providers process your data on our behalf and are contractually obligated to protect it.
—————
5. Your Responsibilities as a User
5.1 Compliance with GDPR and Privacy Laws
As a user, you are responsible for ensuring that any images or content you upload comply with applicable data protection laws, including GDPR if relevant. Specifically:
- You must obtain the necessary permissions or consent from individuals depicted in your images before uploading them to the Service.
- You must not upload images that violate others’ privacy rights.
Magicalbum disclaims responsibility for user-uploaded content that does not meet these requirements.
5.2 Sharing Content
When you share an album, you are responsible for ensuring that sharing complies with privacy laws and respects the rights of individuals depicted in the album.
—————
6. Data Retention
We retain your data as follows:
- Account Information: Retained for as long as your account is active.
- Uploaded Content: Retained until you delete the content, the album expires or terminate your account.
- Usage Data: Retained for analytical and troubleshooting purposes for a limited time.
Upon account deletion, we will permanently delete or anonymize your data unless legal obligations require otherwise.
—————
7. Your Rights
Under applicable data protection laws, you have the following rights:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data.
- Data Portability: Request your data in a structured, machine-readable format.
- Objection: Object to certain processing activities.
- Restriction: Request limited processing of your data.
To exercise your rights, contact us at gdpr@magicalbum.link
—————
8. Data Security
We use industry-standard security measures to protect your data, including encryption, access controls, and regular audits. However, no system is entirely secure, and we cannot guarantee absolute security.
—————
9. International Data Transfers
If you are located outside the regions where our service infrastructure (Hetzner and DigitalOcean) operates, your data may be transferred to and processed in countries with different data protection laws. We ensure that such transfers comply with applicable legal requirements.
—————
10. Children’s Privacy
Magicalbum is not intended for use by individuals under the age of 13. We do not knowingly collect personal data from children. If we discover that a child has provided us with personal data, we will delete it.
—————
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the Service or via email. Your continued use of Magicalbum after such changes constitutes acceptance of the updated policy.
—————
12. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at privacy@magicalbum.link
—————
By using Magicalbum, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.