Privacy policy

Version dated 22 September 2026. This policy explains how Viniette handles personal data on its website (viniette.com), its web app (app.viniette.com) and its mobile applications. The publisher of Viniette is the data controller. Its legal identity and postal address will be stated in the legal notice.

For any question about your data or to exercise your rights, write to support@viniette.com. This address is also open to people who do not have an account.

We use your email, display name, optional profile photo and birthday (day and month only), language and preferences to operate your account. If you sign in with Google, Google shares your name, email and profile picture with us. We also store family memberships and roles, invitations, shared photos with their titles, captions, dates, locations and people tags, and family dates.

Favorites, viewed content and notification preferences support your experience. Sessions and device information protect sign-in; notification tokens are used when you enable notifications. A report contains the reported photo version, its title and caption, your reason and optional explanation, account identifiers and the report date.

If you report a problem or suggest an idea from Account, your message, the email you choose to give, the app version, your language and technical diagnostics are sent to Sentry. Photos are never included and no screenshot is taken.

Photos are re-encoded before they are stored: location data (EXIF and GPS) added by cameras is removed, and the original file is deleted once the display versions exist. A place is attached to a photo only when you choose one.

At successful authentication, Cloudflare infrastructure supplies the server with the public IP address and, when available, the approximate country of the connection. The server retains the encrypted IP, country, date and account identifier for 30 days. The hourly cleanup removes this journal after expiry. The country may be inaccurate, particularly with a VPN or mobile network; this mechanism does not record GPS coordinates, a city or a precise address.

The Service calculates connection totals per country and month, without IP addresses or account, session or family identifiers. Totals cover the current month and the previous eleven months, no more than 12 months. They count connections, not distinct people. The restricted staff console displays only these totals; family administrators cannot access the journal or platform statistics.

The purpose is to measure the geographical distribution of Service use and check the quality of statistics. Processing is based on the publisher’s legitimate interest in understanding use of its service, subject to individuals’ rights and freedoms. You may object on grounds relating to your particular situation as described below. This mechanism does not track every page viewed, make automated decisions with legal effects or target advertising.

Providing your account, your families and the sharing you ask for is necessary to perform the terms of use (GDPR Article 6(1)(b)). This includes delivering the invitations you send.

Some uses depend on your consent (Article 6(1)(a)): sharing your birthday with the families you choose, attaching a location to a photo on the family map, notifications on your device, and optional error reports and performance measurements. You can withdraw consent at any time, as easily as you gave it; this does not affect what happened before.

Protecting the service (sign-in security, rate limits, blocking abusive connections), fixing server errors, connection statistics, invitations sent to people without an account and the review of reported content rely on the publisher’s legitimate interests in running a secure and working service (Article 6(1)(f)). You can object on grounds relating to your particular situation. Answering competent authorities relies on a legal obligation (Article 6(1)(c)).

Viniette does not sell personal data, does not show advertising, does not build advertising profiles and makes no automated decisions with legal or similarly significant effects.

Members can invite someone by email, tag family members in photos and record the birthday of a relative who has no account. When you are invited, we store your address with the family name, the sender and the invitation dates, and use it only to deliver and check that invitation. The invitation can no longer be used after 14 days. The email tells you who invited you and how to object.

People can appear in photos shared by members, who must respect the wishes of the people pictured (see the terms of use). Anyone, with or without an account, can ask for a photo or a detail about them to be removed by writing to support@viniette.com.

Shared photos are available to members of the families selected for the post. Family administrators have the management permissions shown in the app. Optional birthdays are shared only with the families you choose.

After you confirm a report, the platform review team can access its private photo copy and report details. Family administrators of the families you share with can review a report of a photo in that family; they do not see who reported it. The platform team keeps access to the private copy.

Authorized staff operate the service through a restricted console behind a separate access control. They can see account emails, family memberships and security records, and open a reported photo only to review it. Their actions are recorded.

Cloudflare, Inc. (United States) hosts the service. The application database and photo storage are located in the European Union; request processing, caches and security services can run in Cloudflare data centres in other countries.

Supabase, Inc. (United States) provides sign-in. Resend, Inc. (United States) sends sign-in and invitation emails. Functional Software, Inc. (Sentry, United States) receives server error reports, the messages you send from Account and, only if you allow them on your device, error reports and performance measurements. When notifications are enabled, 650 Industries, Inc. (Expo, United States), Apple, Google or Mozilla deliver them. komoot GmbH (Germany) receives only the place name you type to suggest cities, never your identity.

Cloudflare, Supabase, Resend, Sentry and Expo process data on our behalf as processors. If you choose to sign in with Google, Google shares your name, email and profile picture with us under its own privacy policy. Transfers to the United States rely on the EU-US Data Privacy Framework (Cloudflare, Sentry, Resend, Expo, Google, Apple) or on the European Commission’s standard contractual clauses (Supabase, and Cloudflare and Resend in addition). You can obtain a copy of these safeguards from support@viniette.com.

Your account and shared content are kept while your account exists, until you or a family administrator remove them. Removing a photo from one family does not remove copies still shared with another family. A photo’s files are deleted from storage as soon as it is removed from its last family; the remaining records are cleared during maintenance.

Sign-in sessions end after 24 hours (7 days at most) or when you sign out, and the sign-in cookie lasts 10 minutes. An invitation can be used for 14 days. The connection journal is kept for 30 days and country totals for 12 months. Report copies are deleted after 90 days at most, and abandoned report attempts are cleaned up automatically. Sentry keeps error reports and messages for up to 90 days. Your optional diagnostics choice is kept on your device for six months, then we ask again.

Downloaded copies or screenshots held by other family members are outside the app’s storage. Ask recipients to remove them where appropriate.

Security records needed to protect the service (blocked connections, moderation decisions and staff actions) are kept for as long as that purpose requires.

You can access your data, correct it, have it erased, restrict or object to its use, receive the data you provided in a portable format, and withdraw your consent at any time. You can change your profile, preferences, sharing and privacy choices in Account.

To exercise a right, write to support@viniette.com from the address linked to your account, or use Account, then “Report a problem”, stating the right concerned. Full account deletion and data export are currently handled on request. We answer within one month, which can be extended by two months for complex requests, and may ask only for the information needed to confirm your identity. Do not send identity documents.

You can lodge a complaint with a data protection authority, in particular the CNIL in France (www.cnil.fr).

Viniette is reserved for people aged 13 and over. At 13 or 14, a parent or legal guardian must consent together with the minor (French data protection act, Article 45); from 15, minors consent on their own. See the terms of use.

The public website only stores your language choice (cookie “viniette-language”, 1 year). It uses no audience measurement and loads nothing from other sites.

The app uses strictly necessary storage, which does not require consent: a session cookie (“__Host-family_session”, 24 hours to 7 days) and a sign-in cookie (“__Host-family_auth_flow”, 10 minutes), your language (cookie “kinfolk-locale”, 1 year) and appearance (kept on the device until you sign out), a notification registration when you enable notifications, your privacy choice (6 months) and a small offline page. The mobile app keeps its sign-in keys in the device’s secure storage and photos waiting to upload until they are sent.

Optional error reports and performance measurements (Sentry, United States) stay off until you allow them. Viniette asks once after sign-in; declining is as simple as accepting, and you can change your choice at any time in Account, then Privacy choices. In the mobile app, allowing error reports also lets Sentry keep a random installation identifier on the device, which is deleted when you withdraw.

Viniette uses no advertising or tracking cookies and does not share your browsing with other sites.