Privacy Policy

Last updated: May 13, 2026

This privacy policy covers the Curtis Salinger Photography website (curtissalinger.com), the iOS app, and the Android app (together, the "Service"). The short version: the Service does not collect, store, sell, or share personal information about you. The only data the apps send to us is the anonymous push-notification token your device generates if you opt in to notifications.

Information We Collect

We do not collect personal information. There are no accounts, no sign-ups, no analytics, no advertising trackers, and no third-party tracking cookies. We do not ask for your name, email, phone number, or any other personally identifying information in order to use the Service. The single exception is the anonymous push-notification token described in the "Push Notifications" section below.

Push Notifications

If you grant the iOS or Android app permission to send notifications, your device generates an anonymous push token (an APNs token on iOS, an FCM token on Android). The app sends this token to our server so that we can deliver notifications when new photos or albums are posted. The token cannot be used to identify you personally — it identifies a specific app install on a specific device, and it rotates if you reinstall the app.

Tokens are stored on our server (Cloudflare) for as long as your install is active. They are automatically removed when Apple's or Google's push services tell us a token is no longer valid (for example, because you uninstalled the app or revoked notifications). You can revoke notifications at any time in your device's system settings, which also stops the token from being usable.

Apple Push Notification service (Apple) handles delivery on iOS; Firebase Cloud Messaging (Google) handles delivery on Android. We do not send these services any information about you beyond what is required to route the notification to your device.

App Permissions

The iOS and Android apps may request the following permissions. With the single exception of notifications (described above), data covered by these permissions stays on your device and is never transmitted to us or to any third party.

  • Notifications: Lets us tell you when new photos or albums are posted. See the "Push Notifications" section above for the only piece of data this sends to us.
  • Save to Photos / Photo Library: Only used when you choose to save a watermarked photo to your camera roll or gallery. We do not read photos from your library.
  • Favorites: When you favorite a photo, that preference is saved in the app's local storage on your device. It is not synced to any server and is removed when you delete the app.

Photo Content

The apps and website display photographs hosted by Curtis Salinger Photography. Loading these images requires your device to make standard network requests, which, like any web request, include your IP address and user agent. We do not log or analyze this data for tracking purposes. The Android app uses the Google Maps SDK to render the photo-locations map; map tile requests are sent to Google on your device, subject to Google's privacy policy.

Private Client Galleries

Some galleries are password-protected. When you enter a password, it is sent over HTTPS to verify access. We do not store the passwords you type. To protect against brute-force attempts, the server temporarily uses your IP address for rate limiting; this data is not used for any other purpose and is not shared.

Third Parties

We do not sell, rent, or share information with third parties for marketing or analytics purposes. We rely on the following service providers to deliver the Service:

  • Cloudflare: Hosts the website and apps' backend. May process standard network-level information (such as IP addresses) as part of delivering content and protecting against abuse.
  • Apple (APNs): Delivers push notifications to iOS devices.
  • Google (Firebase Cloud Messaging, Google Maps SDK): Delivers push notifications to Android devices and renders the photo-locations map on Android.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect information from anyone, including children.

Changes to This Policy

If this policy ever changes, the updated version will be posted on this page with a new "Last updated" date.

Contact

Questions about this policy? Reach out at [email protected] .