Privacy
Your family's moments are not our raw material
Last updated
QuietAlbum is a private album for the people you invite. Its business is a yearly price, not your data. This page says plainly what we store, where it lives, who else touches it, and what we will never do with it. Questions: hello@quietalbum.eu.
The promises
- We do not train AI on your content, and we do not mine it. Not ours, not anyone's.
- We never sell your content or your data. There are no ads and never will be. The price is what pays for the service.
- We do not use your content in marketing unless we have asked you and you have said yes - for that specific photo, story or quote, in writing. No answer means no.
- No face recognition, no profiling, no discovery. An album exists only for its members. To everyone else it is not blurred or locked; it is simply not there.
- Nobody at QuietAlbum looks at your albums. The exception is a problem you report to us and ask us to fix, and then only as far as fixing it requires.
- You can always leave with everything. Every member can export an album as a zip of original files plus a plain description of posts, comments and reactions.
- Erasure means erasure. When you delete an album or your account, the content is gone from our systems - the originals, the resized copies, the rows in the database.
What we store
- Your account: email address, the name you choose, and any per-album nickname. No password - sign-in is a one-time link or code sent to your email.
- Your albums: posts, dates, tags, photos, videos and audio clips as uploaded (full quality, never recompressed), plus the smaller display copies we make from them. Comments and reactions, with who wrote them and when.
- Membership: which albums you belong to, your role in each, and invite links you create. Notification preferences.
- Billing: which album a subscription or gift covers and its status. Payments are handled by Stripe; we store Stripe's identifiers, never card numbers.
- Waitlist: if you joined the waitlist on this site, your email address, held in our own mail system until you are invited or ask to be removed.
- Technical: one session cookie so you stay signed in. Our servers keep no access logs with your IP address, and the app runs no analytics. This marketing site counts page views with a cookieless, anonymous counter (PostHog, EU region): a random id per page load, the page path, nothing about you.
Where it lives
Everything is stored and processed in data centers in the European Union, under Swedish and EU law (the GDPR), by Stenite AB in Sweden. We use a short list of providers to run the service. Two of them, Supabase and Amazon Web Services, are US-owned companies operating EU regions; we use them for the database and for delivering email, never for your photos, videos or audio.
| Provider | What for | Where | Sees your content? |
|---|---|---|---|
| Hetzner | Servers and media storage (photos, videos, audio) | Helsinki, Finland | Stores it, encrypted in transit; private bucket |
| Supabase (on AWS) | Database (posts, comments, account data) and the sign-in email service | Stockholm, Sweden | Text content yes; media no |
| Amazon Web Services (SES) | Delivering the emails our own mail server sends | Stockholm, Sweden | Only email addresses and the email text |
| Stripe | Payments, receipts, subscription management | Stripe Payments Europe, Ireland | No - only the payer's email and the amount |
| PostHog | Anonymous page-view counts on this website only | Frankfurt, Germany | No |
| Cloudflare | DNS for quietalbum.eu (name lookup only, no traffic) | - | No |
This list is kept current. We do not share personal data with anyone else, and we do not hand it to authorities unless a valid legal order under EU or Swedish law compels us - in which case we tell you, where the law allows.
Emails we send
Sign-in codes, invitations you or another member trigger, notices about an album's deletion or subscription, and a digest of new posts in your albums. The digest is daily by default; you can switch it to weekly, per album, or off on your account page.
Now and then we may also email you about our own things - a new feature, or a new product from Stenite AB. A few times a year at most, every one with an unsubscribe link, and never on behalf of anyone else. Your content is never used in those emails without your yes, as promised above.
How long we keep things
- While an album is in its trial or paid: as long as you want it.
- When a subscription lapses: the album becomes read-only - viewing and export keep working - for at least twelve months. Before anything is removed we email every member several times, starting at least 30 days ahead.
- When an admin deletes an album: every member is notified and reminded to export. After 30 days (an admin can cancel in the meantime) the album and all its files are permanently deleted.
- When you delete your account: immediately. Your memberships, comments, reactions and the posts you made are removed; an album you were the only member of goes with you. You are shown exactly what will disappear before you confirm.
- Backups: database backups roll over within days. Media has no separate backup copy, so a deleted file is gone when the delete completes.
- Waitlist emails: until you are invited or ask us to remove you.
We never promise "forever". We promise that you will always be warned in time and can always take everything with you.
Children
Most albums are about children, uploaded by the adults responsible for them. We process that content only on the instruction of the account holder who posted it, treat it as strictly private, and never analyse it. Account holders must be 18 or older.
Your rights
You can see and change your data in the app, export any album you are a member of, and delete your account yourself. Under the GDPR you also have the right to access, rectify, erase or restrict processing of your personal data, to object, and to receive it in a portable format - email us and we answer within 30 days. You can complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), or to the authority in your own EU country.
Legal bases, for the record: we process your data to provide the service you asked for (contract), to keep it secure, send essential notices and occasionally tell you about our own products (legitimate interest - you can opt out), and, only where you have given it, with your consent - which you can withdraw at any time.
Security
Everything travels over TLS. Media sits in a private bucket that only the app can read, and the app checks your membership on every request. There are no passwords to leak. Access to the servers is by key, not password, and limited to the people who run Stenite AB.
Scanning
We do not scan your content for advertising, training or profiling. If the law ever requires us to match uploads against known child-abuse material, we will say so on this page before it happens, and it will be that and nothing more.
Changes
If we change something that affects you - a new purpose, a new provider - we tell you before it takes effect, in the app or by email. Small edits just move the date at the top of this page.
Data controller: Stenite AB, Sweden. hello@quietalbum.eu. See also our terms of service.