Last updated 2026-10-04
Draft. This document has not yet been reviewed by a lawyer and will be updated before public launch.
Shutter is for people 16 and older. We collect as little as we can, never sell personal information, and never use advertising that tracks you.
What we collect
| Data | Why | How long |
|---|---|---|
| Email address | Sign-in, important account and memory-deletion reminders | Until you delete your account |
| Username, optional school, teams | Friends, team codes, school scoreboard | Until you delete your account |
| Confirmation you are 16+ (a checkbox and its time) | Age rule. We do not collect birthdates. | Until you delete your account |
| Photos you post (back, front and the stamped version) | Showing your post to friends for the current shutter, and your private Memories | Until you delete the photo or your account. Then removed from storage. |
| Post timing (on time or how late), retake count | Shown on the post; streaks; school score | With the post; aggregate school numbers are kept |
| Push notification token | Shutter alerts | Until you sign out or turn notifications off |
| Reports and safety records | Keeping people safe; legal obligations | As long as needed for safety and the law |
What we never collect
- Birthdates, phone numbers, or your contact book
- Location. Photo location and other metadata are removed on your phone before upload.
- Photos from your camera roll (the app can't import them)
- Cross-site or cross-app tracking identifiers
Analytics
Our website counts page views per day without cookies, IP addresses, or identifiers. We honor Do Not Track and Global Privacy Control. There are no third-party ad or analytics pixels.
Who sees your posts
Only friends you've accepted, only for the current drop, and only after they post. Our safety team can see posts that are reported or flagged by automated screening.
Sponsors
Local sponsors appear as labeled lines on school pages. They receive no personal data about anyone.
Service providers
We use providers to host data (Supabase), deliver the website, send email, deliver notifications (Apple), and screen images for safety. They may only use data to provide their service to us.
Safety and the law
We report apparent child sexual exploitation to NCMEC as required by law, and we remove intimate images on request within 48 hours. We may share information when legally required or to protect someone from serious harm.
Your choices
- Save any memory to your phone at any time.
- Export all your memories from Settings.
- Delete your account in Settings. This deletes your profile and removes your photos from storage.
- If you are under 16, you may not use Shutter. If we learn an account belongs to someone under 16, we delete the account and its data.
Contact
Privacy questions: masonngo70@gmail.com. Safety: masonngo70@gmail.com.