Privacy policy

The data controller is A L'AVANT POSTE (EURL), 3 impasse des Badamiers, 97410 Saint-Pierre. Contact: contact@fotomania.app.

Contact form: name, email address, subject and message. Account and subscription: email and information needed to manage your subscription and its payment. Family plan: the email address of the people the subscriber invites, to send them the invitation; the subscriber sees their members' addresses and the total space used, never their photos. Sharing by email: the recipient's email address, to send them the share and let them find what was shared with them. Your photos and videos, which you entrust to us for hosting, with the information they contain (date, GPS location, device); for a photo uploaded from an iPhone, its identifier in the iCloud photo library, to recognise a photo that is already backed up. Imports from other services (Google Photos, Apple, Google Drive, OneDrive, iCloud Drive), only if you use them: see “Imports from other services” below.

Mobile app: a technical identifier of your device (a fingerprint of your phone's identifier) accompanies each photo upload, as the backup protocol requires. Our servers do not keep it; it is shared with no one and never used for advertising.

We never collect more than necessary.

So that you can find your photos, our servers analyse them automatically: • faces are detected and grouped by person: a digital fingerprint of each face is stored; • smart search stores a digital description of each image, for free-text search (“beach”, “birthday”); • text visible in a photo is read and stored, for search; • the city and country are derived from the photo's GPS coordinates, without calling any outside service.

The analysis works on a preview of the photo, never on the original. It runs on our servers in Germany (netcup) or, as a fallback, in France (OVHcloud); the analysis service keeps nothing. Photos in the locked folder are analysed too, but do not appear in search.

These results are visible to you only: the names you give to people are not shown to those you share your photos with. They are deleted with the photo (when it leaves the trash, 30 days after deletion) or with your account. Deleting a “person” only removes their name and profile: the face fingerprints remain attached to the photos for as long as the photos exist.

You can import your photos from other services. In every case we only read: we write, change and delete nothing on their side.

Google Photos (Takeout) and Apple archives, on the web: you download your archive yourself; it is read in your browser. We contact neither Google nor Apple, and only the photos and videos are sent to us.

Google Drive, in the app: your phone reads, directly from Google, the folder whose link you paste (a folder shared with “anyone with the link”), without signing in to your Google account. Google receives your phone's IP address, the identifiers of the folder and files, and the Fotomania app identifier. Photos go from Google to your phone, then to us; we do not keep the link.

iCloud Drive, on iPhone: you choose a folder in the Files app; iOS downloads the files from iCloud. We do not contact Apple.

OneDrive, in the app: you sign in to Microsoft from your phone; the read authorisation stays on your phone and we never receive it.

OneDrive, on the web: you sign in to Microsoft, which never gives us your password. We keep, encrypted, the read authorisation Microsoft grants us and your account name, as well as the list of imported files (name, folder, size, date). Our servers in Germany (netcup) download the photos from Microsoft, then place them in your Fotomania account. Technically, the authorisation Microsoft grants covers reading your whole OneDrive: we only read the folders you browse or import.

Google, Microsoft and Apple are not our processors: they are your own services, which you choose to use, and they process your data under their own rules, partly outside the European Union.

Answering your requests (legitimate interest). Providing and managing the service and your subscription (performance of the contract). Meeting our legal and accounting obligations.

We never use your photos for advertising and never resell them.

Your data and your photos are hosted in the European Union (France and Germany), in compliance with the GDPR.

Two exceptions, outside our servers: the map background, shown when you open the map or the details of a located photo, is loaded by your browser or the app from the service of Immich, the publisher of the software Fotomania is built on, which receives your IP address and the map area displayed; and imports from Google Drive or OneDrive, which go through Google and Microsoft (see “Imports from other services”).

Our processors are European: hosting of the website and production server (OVHcloud, France), automatic photo analysis, video stabilisation and OneDrive import from the web (netcup, Germany), storage and backups (Hetzner, Germany, and Scaleway, France), email delivery (Scaleway), payment (Mollie, Netherlands). They only access the data strictly necessary for their task and use it for no other purpose.

Your data is kept for the duration of your relationship with Fotomania, then deleted or anonymised within the legal timeframes. After an unconverted free trial, your data is deleted following a notice period (see the FAQ). For a paid subscription that is cancelled or not renewed (including for non-payment), the account becomes read-only, then — without re-subscribing — your data is permanently deleted from our servers 30 days later, after a notice sent by email with a recovery link.

Once deleted from our servers, your photos and videos also disappear from our backups within 30 days. Our databases (account, photo information and analyses) are backed up too, encrypted, at Scaleway in France; these safety copies are only used to restore the service after an incident.

OneDrive import from the web: the authorisation is kept until you click “Disconnect” in Fotomania, or until your account is deleted; the list of imported files, until your account is deleted. Removing Fotomania from your Microsoft account cuts off access but does not delete this data on our side: use “Disconnect”.

You have the right to access, rectify, erase, port, object to and restrict the processing of your data. You can exercise them at contact@fotomania.app. You may also lodge a complaint with the CNIL (French data protection authority).

The site uses no advertising cookies, no tracking and no third-party cookies. It only keeps, in your browser, two pieces of information strictly necessary for it to work: your language preference (a technical cookie, set only if you choose a language different from your browser's) and the fact that you closed the information message (saved in your browser's local storage, not in a cookie). This information cannot identify you and is shared with no one. You can delete it at any time from your browser settings.

On the app itself (photos.fotomania.app and api.fotomania.app), technical cookies are needed for it to work: your sign-in session and, while connecting to OneDrive, a 10-minute cookie that secures the exchange with Microsoft. None of them is used for tracking.

To understand which pages are useful to you and improve the site, we measure its audience with Umami, a European tool that we host ourselves. It works without cookies, stores nothing on your device, does not keep your IP address, and cannot identify you or track you across sites. The resulting statistics are strictly anonymous and shared with no third party. This is why such measurement does not require your consent and why no banner is imposed on you.

We put the protection of your data at the heart of the service, in compliance with the GDPR. For any question about your personal data, or to exercise your rights, you can contact our data protection contact at contact@fotomania.app.

For any question about your personal data: contact@fotomania.app.