Privacy Policy

This policy describes how PhotoMatchFun handles information when you browse our website, create a game, contact us, or order digital or printed products. It includes the information we send to third parties for image processing, payments, printing, shipping, and store pickup.

It describes PhotoMatchFun's practices. Independent payment providers, retailers, and other services also handle information under their own policies. Our policy does not replace those policies or govern unrelated services such as a retailer's pharmacy or loyalty program.

• Photos and game content: images you upload, generated images, selected themes, cropping and layout choices, print files, and product selections. Photos may contain information about you or other people and may include file metadata.
• Account and contact information: name, email, phone number, sign-in identifiers, profile information supplied by your sign-in provider, and messages you send us.
• Orders and recipients: shipping and billing details, pickup store, recipient contact information, quantities, prices, discounts, order identifiers, delivery updates, payment status, and support or refund records. You may provide someone else's details when sending a gift.
• Device and usage information: IP address, browser and device details, referring pages, page visits, feature usage, transaction events, timestamps, and operational logs. Cookies and browser storage also support sign-in, saved creation progress, cart details, and analytics.
• Store searches: a ZIP code or, when you choose “Use my location” and grant browser permission, device coordinates used to find nearby pickup stores.

We receive information directly from you, automatically from your use of the service, and from sign-in, payment, fulfillment, and delivery providers when they return account, transaction, or order updates. Our business outreach tools also use contact lists supplied by our team, including names, organizations, postal addresses, and campaign records.

We use information to maintain accounts; create, preview, and deliver games; process payments and refunds; route orders; provide pickup and shipping updates; answer questions; troubleshoot problems; prevent abuse and fraud; and maintain business and transaction records. We also use service and campaign analytics to understand demand, measure advertising, and improve the website.

Photos are processed to provide the game you request, including any themed variations you choose, and to resolve related production or support issues. Authorized staff may view order artwork for these purposes, and administrative image-analysis tools can identify general objects or image categories. We do not use your uploaded photos for another purpose, including our advertising, without your explicit consent.

Order-related communications are part of providing the service. Promotional outreach is separate; you can ask us to stop promotional email or postal mail by contacting us. Opting out of promotion does not stop essential order, security, or privacy communications.

To fulfill printed orders, we share print-ready artwork, product specifications, quantities, order references, and the recipient's name, address, and contact details with third-party printing and fulfillment partners. They may use production facilities, order-routing services, shipping carriers, and support providers to manufacture, package, deliver, track, or resolve a problem with your order. Information needed for international delivery may also be processed for customs.

For Walgreens pickup, we send the artwork, selected store, order details, and pickup contact information to Walgreens, either directly or through an order-routing partner. Walgreens uses this information to prepare the prints and manage pickup. We receive order references and status updates. Location searches may pass your ZIP code or permitted coordinates to the store-search provider.

Walgreens also handles information from your interactions with its stores, websites, payments, and services under its Online Privacy & Security Policy, including its own collection, analytics, disclosures, retention, and privacy choices. Those choices are managed with Walgreens. PhotoMatchFun does not receive your pharmacy records as part of a photo pickup order.

Payments: Square or Stripe processes online card payments, depending on the checkout option. A payment provider receives payment credentials and the billing, transaction, device, and fraud-prevention information needed for its services. PhotoMatchFun retains order records, payment references and status, and limited payment-method information returned by the processor, rather than storing full card numbers or security codes. In-store payments are handled by the retailer. See Square's customer privacy policy and Stripe's Privacy Policy.

Image processing: when you request themed or AI-generated artwork, your image and generation instructions are processed by the configured AI provider. Supported services include Google/Gemini, OpenAI, and hosted image-generation services. Which provider receives the request depends on the feature and model configuration. Processing may involve temporary uploads, generated files, and service logs. PhotoMatchFun's retention policy does not set an independent provider's retention period.

Operating the service: we use cloud hosting, Firebase storage and authentication, email delivery, analytics, and support tools. These services process the information needed for their role. Authorized administrators can access account, artwork, and order information to operate and support the service.

Mail campaigns: our mailing workflow sends recipient names, addresses, and personalized letters or artwork to printing and mailing services. Contact sheets, campaign documents, and delivery or authorization records may be stored in our business workspace and application. Contact us to request removal from our outreach lists.

Optional wallet features: if you use a wallet or blockchain payment feature, we process the wallet address, signatures, and transaction references needed to verify the action. Public blockchain transactions can remain visible to others and cannot be erased by PhotoMatchFun.

We collect basic first-party daily totals before an analytics choice and when you choose “Aggregate only.” These measure approved public page views, shopping steps, upload and checkout problems, broad traffic sources and screen sizes, loading and generation speed ranges, and page views with engagement, scrolling or selected shopping-link clicks. Traffic sources are categorized in your browser, such as search, social, email or paid campaigns. Only the category is sent; raw referring URLs, search terms, campaign names and advertising click identifiers are not sent to these counters. Screen sizes and timings are also reduced to broad categories in your browser.

These counters store no visitor or session identifiers, IP addresses, fingerprints, exact event times, raw referring URLs, URL parameters, account or order references, error messages or personal content. We do not use them to identify unique visitors, reconstruct individual journeys, reidentify people or join activity to customer records, and we do not send them to Google. Routine hosting and security logs are separate and may contain network information such as IP addresses.

Choosing “Only necessary” stops these counters as well as detailed analytics. We also stop both for Global Privacy Control or Do Not Track signals. Continuing with the optional detailed-analytics checkbox unchecked keeps only basic counters active, unless you previously chose Only necessary or your browser sends a privacy signal. We preserve existing saved opt-outs. Daily totals already recorded remain available for reporting.

We use cookies, local storage, session storage, and browser image storage to support authentication, remember choices, restore game creation progress, and avoid duplicate transaction reporting. Clearing browser data may remove saved progress or require you to sign in again.

Detailed analytics are off until you choose “Allow detailed analytics” in Your Privacy Choices or select the separate optional analytics checkbox when continuing past the contact and terms step. Accepting terms alone does not enable detailed analytics; you may continue without that optional choice. This enables Google Analytics and our first-party interaction tracker on selected public pages. Google Analytics events include game-creation steps, product and fulfillment choices, checkout milestones, purchase identifiers and values, and coupon information. We use reports to understand usage and improve the service.

Choose “Aggregate only” to stop detailed analytics while keeping basic counters, or “Only necessary” to stop both. You can change your choice using Your Privacy Choices in the footer. We store this preference in this browser for up to 180 days. Declining or withdrawing stops future optional analytics and clears the analytics storage we control; it does not delete reports already collected. You can contact us about deletion requests.

We honor Global Privacy Control and Do Not Track by disabling both optional trackers, even if you previously allowed analytics. Google advertising storage, advertising personalization and Google signals are disabled in our tag configuration. Your order terms are separate from analytics consent. Our own marketing communications and any independently managed advertising campaigns have separate opt-out and data-handling requirements.

Necessary sign-in, payment, fraud-prevention and other requested services may still contact their providers. Their data handling is described above. Blocking all browser storage or scripts can affect these features.

We also collect first-party interaction analytics on selected public pages to understand where visitors go, which parts of a page they use, and where checkout becomes difficult. Reports show common page paths, approximate click heatmaps, scroll depth, and shopping milestones such as starting checkout or completing a purchase.

This tracking records a normalized page path, event time, broad device category, approximate click position and target type, selected internal link destinations, scroll-depth thresholds, and milestone names. It does not record screen video, uploaded images, typed text, form values, payment details, or customer account identifiers. Page paths omit query strings and fragments and replace supported product identifiers with a route template. Clicks inside forms and editable fields are excluded.

A random identifier in your browser tab's session storage groups these interactions into sessions lasting up to 30 minutes. It is not linked to your account. Raw interaction records are scheduled for automatic deletion after 90 days; deletion processing may take additional time. Access to the reports is restricted to site administrators.

Both optional trackers require your affirmative browser choice, honor Do Not Track and Global Privacy Control, and skip signed-in administrators. Application-sent analytics page details omit query strings and fragments, use generic page titles and normalized public routes, and exclude account and admin pages.

We may disclose relevant records when required by law or legal process, to investigate misuse or protect people and the service, or in connection with a business transfer subject to applicable requirements. We may also share information for an additional purpose that you specifically authorize.

Our service providers and production partners may process information in the United States and other countries, including locations outside your country of residence. This can include overseas printing, cloud processing, and support. Privacy laws and government access rules differ between countries.

Providing information to a partner for an order does not make all of that partner's unrelated data practices PhotoMatchFun's practices. Contact us for questions about the recipients or processing associated with your particular order.

We keep uploaded and generated images, print files, account information, and order records as needed to provide requested services and meet legal obligations. The relevant period depends on order completion, downloads or support, payment disputes, accounting requirements, and the type of record. Browser-held copies may remain on your device until cleared.

You can request deletion of your account, personal information, and uploaded photos at hello@photomatchfun.com. Personal information and uploaded photos are removed from active PhotoMatchFun databases within 30 days of a deletion request, except where retention is required by law. We may need to verify that a request comes from the account owner or an authorized person.

Deleting a PhotoMatchFun account does not itself delete a retailer or payment account, completed physical prints, public blockchain records, or copies independently retained by another provider. We can help identify the appropriate request route for an order partner. Backup expiration and legally required records may follow different schedules. First-party raw interaction records follow the 90-day schedule above.

You can update available account details, choose which photos to upload, use a ZIP code instead of device location, revoke browser location permission, clear saved browser data, and request that promotional outreach stop.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of your personal information; withdraw consent; restrict or object to processing; or opt out of certain sales, sharing, or targeted advertising. You may also have rights to use an authorized agent, appeal a denied request, or contact your local privacy authority. We handle applicable requests without unlawful discrimination.

Send requests or appeals to hello@photomatchfun.com with enough information to locate your account or order. Please do not send a password or full payment-card number. We respond within the period required by applicable law and explain any verification, exception, or extension that applies. Requests about independent provider accounts should also be directed to that provider.

We use access controls, authenticated administration, encrypted connections, and safeguards provided by our hosting and payment services to protect information. No website, transmission, or storage system can guarantee absolute security.

Keep account credentials and download or order links private. A person who receives a usable file or download link may be able to access its contents. Contact us if you believe someone has accessed your account or photos without permission.

Only upload images and provide recipient details you have permission to use. Where needed, obtain permission from the person pictured, a parent or guardian, or an authorized representative. Do not upload medical records or other unnecessary sensitive information to make a game.

The ordering service is intended for adults and is not directed to children under 13. An adult may choose family photos containing children when authorized to do so. If you believe a child has submitted personal information directly without appropriate authorization, contact us so we can investigate and remove it as appropriate.

We update this policy when our service or data practices change and show the revised date on this page. Where required, we provide additional notice or obtain consent for material changes.

For privacy questions, requests, or concerns, email hello@photomatchfun.com or write to PhotoMatchFun, 7 Elm St, Second Floor, New Haven, CT 06510, United States.