Privacy Policy

NinjaPic lets photographers share event photos with guests, who find their own photos with a selfie. We collect as little as possible and protect it.

Guests

Your selfie never leaves your phone. Your phone turns the live camera image into a set of 128 numbers (a face descriptor). Only those numbers are sent to find matches, and they are not stored.
You see only photos your face appears in (plus all photos if the photographer made the event public).
We keep a random device ID in a cookie and a log of searches (time, a one-way hash of the device ID, IP address, number of results) to stop abuse. Search logs are deleted after 90 days.
You can ask the photographer to hide or delete any photo of you.

Photos are uploaded by the photographer to private cloud storage (Backblaze B2). Links to photos are signed and expire within hours.
To make search work, the photographer's browser stores face descriptors for faces in event photos. No face images are stored separately.
Face data is deleted as soon as the event ends. Full-quality originals are deleted automatically after the event's validity period; smaller previews may be kept until the photographer deletes the event.
Platform administrators cannot view or download event photos.

We store your studio details, login details (passwords are hashed), plan and payment records (amount, UPI reference), and an activity log for security.
You control your events and photos and can delete them at any time.

Encrypted connections (HTTPS), hashed passwords, rate limits, strict access checks and audit logs. Storage keys are encrypted at rest.

Questions: contact the platform support listed in your studio panel · Last updated 15 Oct 2026