Last updated: April 17, 2026
RetroTagr ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our photo geotagging service. By using RetroTagr, you agree to the collection and use of information in accordance with this policy.
When you create an account, we collect:
When you upload and process photos, we collect:
We automatically collect:
We use Stripe for payment processing. We do not store your credit card details on our servers. Stripe collects and processes payment information according to their Privacy Policy.
We use collected information to:
All photos uploaded by registered users are saved to your account and remain available until you delete them or close your account. Photos count towards your storage quota.
Account information is retained as long as your account is active. Upon account deletion, we delete or anonymize your data within 30 days, except where we are required to retain it for legal or compliance purposes.
We use the following third-party services:
Database and file storage provider. Photos and metadata are stored on Supabase's infrastructure.
Payment processing for subscriptions and usage-based billing. Stripe handles all payment data.
Authentication via Google Sign-In. Google may collect data according to their privacy policy.
Interactive map service for GPS coordinate selection. Mapbox may collect usage analytics.
Application hosting and content delivery. Your requests are processed through Vercel's global edge network.
Transactional email delivery for account verification, password resets, and notifications.
Product analytics and session replay to understand how RetroTagr is used and improve the user experience. Data is stored in PostHog's EU Cloud (Frankfurt). Session recordings mask personal data (photos, emails, names). PostHog processes data only after you consent to analytics cookies.
When you use our AI-powered location analysis feature, your photos are temporarily sent to one or more of the following AI providers for analysis. Photos are processed in real-time and are not retained by these providers beyond the analysis session.
AI features are optional and require your explicit action. AI suggestions are never automatically applied to your photos. You maintain full control over whether to accept, modify, or reject any AI-generated suggestion.
We process your personal data on the following legal bases:
We implement industry-standard security measures including:
While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay. Notifications will include the nature of the breach, likely consequences, and measures taken to address it.
We use the following cookies:
You can control cookies through your browser settings.
RetroTagr is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children.
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers.
If you are using RetroTagr on behalf of a business or organization, additional terms may apply. Our Data Processing Agreement (DPA) provides detailed information about how we process data as a data processor, including sub-processors, security measures, and Standard Contractual Clauses for international transfers.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
If you are in the European Union, you have the right to:
To exercise these rights, please contact us at privacy@retrotagr.com.
If you have questions about this Privacy Policy, please contact us: