Privacy
Short, because there isn't much to hide.
Last updated 23 July 2026
The one-paragraph version
Our own visit statistics are cookie-free and anonymous — nothing is stored on your device and nothing can follow you across days or sites. Google Analytics runs only if you press "Accept" in the cookie banner. The app never phones home unless you opt in, and even then it only sends timings — never your photos, file names, folders, or anything that identifies you. You can withdraw any choice at any time.
On this website
- Without any cookie (our own statistics): each page visit is counted with the page, referrer, UTM tags, country, and device class. To tell visits apart within a single day we compute a short-lived anonymous hash from your IP address and browser type that changes every day and is never stored alongside your IP — the IP itself is not saved. Nothing is written to or read from your device, so no consent is required, and there is nothing that could identify you or track you over time. Downloads are counted the same way.
- With your consent only:Google Analytics 4, with advertising signals disabled. It sets its own cookies, which is why we ask first. Decline and the only cookie is the one remembering your "no" (
cl_consent); declining after accepting also removes the GA cookies. - If you give us your email (news list or feedback form), it is used solely for that purpose: release announcements or replying to your report. Unsubscribe or ask for deletion anytime.
In the app
- By default: nothing. Cullora works fully offline. No account is required, ever.
- Performance telemetry is opt-in.If you agree (first-run question, changeable in Settings), the app sends operation timings and counts — e.g. "scanning 400 photos took 2.1 s" — under a random install id that is not linked to your account. Never file names, folder paths, image data, EXIF or emails. Turning it off also deletes anything not yet sent.
- Feedback you send includes your message, the app version and OS family (Windows/macOS), plus your email only if you typed or kept one.
- Optional accounts (email/password or Google) store your email and a per-account count of photos filed. Nothing about the photos themselves.
- Update checks ask our server for the latest version number; they carry no identifier and nothing is logged about you.
Where it lives, and your rights
Data is stored with Supabase (database, auth) and the site runs on our own private server. Under the GDPR you can request access, correction or deletion of anything tied to you — email [email protected] and it will be handled by a human. Withdraw analytics consent anytime via — it's one click, same as giving it. Consent is re-asked every 6 months.