Privacy Policy

When you create an account:

• Your email address, display name and username.
• A hash of your password — never the password itself. If you sign in with Google we store no password at all, only the account identifier Google gives us.
• Your Google profile picture and the date you joined, if you signed up with Google.
• The date and time of your sign-ups, sign-ins and sign-outs.

When you upload a panorama:

• The image itself, which is public.
• The title you give it and the place you attach to it — a city and country, not a precise position.
• Its dimensions, and the time you uploaded it.

As you use the site: the panoramas you like, save, comment on, and the accounts you follow.

A photo straight off a phone carries an exact GPS fix, the capture time and details of the device that took it. Panohrama reads that in your browser to suggest a location, and then strips it out before the file is uploaded. The stored image carries no EXIF, so the precise coordinates of where you were standing never leave your device. What is stored is the city and country you confirmed.

Anything you publish — the image, its title, its location, your username and profile picture — is visible to anyone, signed in or not, and is fetchable at its own URL. Please do not upload anything you would not want seen publicly.

Uploads appear immediately and are then checked automatically for explicit content by Google Cloud Vision. A photo that fails is removed from public view and queued for human review, and we are notified. We keep the result of that check against the photo.

One cookie, to keep you signed in. It is signed so it cannot be forged, marked HttpOnly so scripts cannot read it, and sent only over HTTPS in production. There are no advertising or cross-site tracking cookies on Panohrama, and no analytics that profile you.

We use these providers to run the service. Each receives only what it needs, and none of them are permitted to use it for their own purposes.

• Neon — the database (United States).
• Cloudinary — image storage and delivery.
• Vercel — hosting.
• Resend — verification, password-reset and notification email.
• Google — sign-in, place search, turning coordinates into a city name, and the explicit-content check.

Because our database and hosting are in the United States, your data is transferred there.

Your account and panoramas are kept until they are deleted. You can delete any of your own photos at any time from your profile, which removes them from the site. Verification and password-reset links expire on their own.

Deleting a whole account is not yet self-service. Email us at anish@stealth.design from the address on the account and we will delete it, along with your panoramas, likes, saves, comments and follows.

Panohrama is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has an account, write to us and we will remove it.

If this policy changes we will update the date at the top of this page, and for anything significant we will tell account holders by email.

Questions, requests for a copy of your data, or corrections: anish@stealth.design. See also our Terms of Service.