Privacy
Last updated August 2, 2026
Toucan Share holds photos from trips — which means it holds things people care about. This page says exactly what we store, who can see it, and how to get rid of it. No advertising, no tracking, and nothing sold to anyone, ever.
What we store
- Your account: the email address (or phone number) you sign in with, the display name you choose, and your theme preference.
- Your photos and videos: the files you upload, plus the smaller versions we generate for viewing and sharing.
- Tour membership: which tours you belong to, and the access levels you grant other people for your photos.
- Guest viewers: if someone verifies their email to keep viewing a share link after its window closes, we store that email so you can see and revoke them.
We do not use advertising SDKs, analytics SDKs, or third-party trackers. There is no profile of you being built anywhere in this app.
Who can see your photos
You control this per photo set. When you share photos to a tour, you choose what other members can do — view only, save a social-size copy, or download the original. You can change it per person at any time in Access, and changes apply immediately.
Share links let people outside the tour view photos without an account. They are tied to you, expire after the tour’s guest window, and you can revoke any link or verified viewer. Guests never get more than the access each member has granted to guests.
Where photos were taken
The shared versions of your photos have their embedded camera data — including GPS coordinates — removed during processing. Your original file is kept as you uploaded it, with whatever your camera recorded, and is only ever served to someone you have granted original-quality access.
We read the capture time out of your photos so the timeline can order them correctly. That time is the only camera metadata we copy into our database — everything else stays inside your original file and goes no further.
We email you a sign-in code when you sign in, and we notify you when a guest verifies their email against a link you created. We do not send marketing email. Sending is handled by Resend, our email provider.
Where your data lives
Photos are stored in Cloudflare R2. The application and database run on a server we operate in Oracle Cloud (United States). Both providers process data on our behalf and have no right to use it for anything else.
Deleting things
- Remove any photo you uploaded, from the photo itself.
- Leave a tour, or delete a tour you own.
- Revoke any share link or verified viewer.
- To delete your whole account and everything in it, email privacy@toucanshare.pics from your account address. We remove it within 30 days, including the stored files.
Children
Toucan Share is not intended for children under 13, and we do not knowingly create accounts for them.
Changes and contact
If this policy changes in a way that affects what we store or who can see it, we will update this page and the date at the top. Questions, requests, or concerns: privacy@toucanshare.pics.