Effective September 19, 2026

Privacy Policy

Cloud Photo Show is a browser-first slideshow service. This policy explains what information the service processes, what it stores, and the choices available to you.

Information processed without an account

When you submit a public Google Photos shared-album link, our server retrieves album information and relays media needed by your browser. Your browser performs previewing and MP4 creation. Browser-local project recovery may retain the album link, editing choices, and temporary media references for approximately seven days after the last edit. Music files and generated videos remain in your browser and are not uploaded to Cloud Photo Show.

Account information

If you sign in with Google, we receive your Google account identifier, verified email address, display name, and—when Google supplies it—hosted-domain value. We use this information only to authenticate your account, maintain sessions, enforce access, and provide account features. For signed-in users, we also record account status, short-lived export reservations, slideshow export outcome, resolution, timestamp, and an optional project identifier for allowance reporting, safety, and reliability diagnostics. If you request Education access, we store the institution, role, optional context, review decision, reviewer, and timestamps. A Google Workspace domain is supporting context only and does not result in automatic approval. Authorized staff may create internal support cases containing a subject, notes, status, authors, and timestamps; these records are removed if the associated account is deleted. We do not store the exported video. We do not request access to Google Drive, Gmail, Classroom, or contacts.

Photos you select privately

Signed-in users may optionally choose Add photos from Google Photos. Only after you select that action does Google ask for additional read-only Picker permission. Cloud Photo Show downloads the photos you select directly into temporary browser memory for editing and video creation; any videos selected in the Picker are skipped. This permission and its access token are not requested during normal sign-in or stored in our database. Picker photos are available only in the current editor session. They are excluded from local and account project saves and are removed when you leave or reload the editor. To keep a photo in a saved project, include it in a shared album instead.

Cloud-saved projects

Account projects store lightweight editing instructions for shared-album media: the public shared-album link, title, media identifiers and source type, order, selections, durations, framing, title styling, transitions, output settings, music filenames/settings, and when available one Google-hosted public-album thumbnail URL. Session-only Picker slides are excluded. We do not store copies of photos, videos, music files, preview videos, Google access tokens, or completed MP4 files. Current testing limits are 10 projects, 500 slides per project, and 1 MiB of project metadata.

Cookies and technical information

We use an essential secure session cookie and a short-lived cookie during Google sign-in. Raw session secrets and Google credentials are not stored in the database. Hosting systems may process standard technical information such as IP address, request time, browser information, requested path, and error details for security, reliability, and troubleshooting. We do not use advertising cookies.

First-party product analytics

We use a random identifier stored in your browser and a random session identifier to count visits and understand how people use Cloud Photo Show. A new analytics session begins after about 30 minutes of inactivity. We record page paths without query strings, the referring website's domain when supplied by the browser, and campaign source, medium, and campaign labels from standard UTM parameters. We also record limited actions such as imports, project creation, rendering, and download clicks, along with coarse technical details such as output resolution and browser category. Signed-in activity may be associated with your account. Analytics do not contain search-query text, your photos or videos, Google Photos album contents or links, uploaded music content or filenames, project titles, tokens, or raw IP addresses. Test-site and production activity are separated. Analytics records are normally removed after approximately 13 months. You may clear the browser identifiers through your browser storage controls.

Sharing and service providers

We do not sell personal information. Information is processed by providers needed to operate the service, including Google for sign-in and shared-album access and Amazon Web Services for hosting and encrypted backups. Information may also be disclosed when required by law, to protect the service or users, or as part of a business transfer subject to appropriate safeguards.

Feedback and support

When you send feedback, we process the category, name and reply email if supplied, subject, and message so we can respond and improve the service. If you choose to include basic diagnostics, we also send the submission time, whether you are signed in, the browser user agent, viewport size, and whether the report came from the editor. We do not automatically include album links, photos, music, access tokens, or project contents. Feedback is delivered through Resend to our support inbox at Gmail; these providers process and retain the email under their own terms. Cloud Photo Show does not save feedback submissions in its application database.

Retention and deletion

Login challenges expire after approximately ten minutes and sessions after approximately seven days unless revoked earlier. Settled export reservations are retained for approximately 30 days, export activity for approximately 13 months, reviewed Education requests and resolved support cases for approximately 18 months, and administrator safety/audit records for approximately three years. Pending Education requests, active support cases, and cloud projects remain until reviewed, resolved, or deleted. Deleting your account removes its identity, sessions, cloud projects, reservations, export activity, Education requests, and support cases from the active database; browser-local projects and Google Photos content are unaffected. Encrypted database backups expire after approximately 30 days, so deleted information may remain in a restricted backup until expiration.

Security and your choices

We use HTTPS, restricted database access, hashed session tokens, encrypted off-server backups, account limits, and monitoring. No system is completely secure. You may sign out, sign out everywhere, delete cloud projects, or delete your account through the Account panel. You may create slideshows without signing in.

Google user data

Cloud Photo Show’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Children and changes

The service is not directed to children under 13. We may update this policy as the service develops. Material changes will be identified by a new effective date and, when appropriate, an in-product notice.

Contact

For privacy questions or account-deletion assistance, email cloudphotoshow@gmail.com.