PicShares is built so that you decide who can see each image you create or upload. This policy describes what we collect, how the privacy controls actually work, and the rights you have over your data. It reflects how the product is built today — not aspirations.
What we collect
- Account data: your email, display name, optional username, bio, and avatar.
- Content: images you upload or generate, captions, comments, reactions, and the AI prompts you submit.
- Social graph: your follows, friend relationships, group memberships, blocks, and mutes.
- Technical data: session tokens, IP address and user agent (used for security and rate limiting), and basic error diagnostics.
Location and camera metadata is stripped
Every uploaded image is processed server-side to remove EXIF metadata, including GPS coordinates and camera details, before it is stored or shown to anyone. We keep only the pixels and the dimensions. This happens on upload and cannot be turned off.
Who can see your content
Each post and image carries an audience that is enforced in the database on every request — never only in the browser:
- Public — anyone, including logged-out visitors and link previews.
- Friends — only people you have a mutual, accepted friendship with.
- Group — only members of the group you selected.
- Only me — nobody else, ever.
Non-public image renditions return a 404 to anyone not permitted to see them, and private posts do not leak so much as a thumbnail or caption to link unfurlers — non-public posts always get a generic share card.
Private accounts, blocking, and muting
A private account restricts all of your content to accepted friends and followers. Blocking makes you and the blocked person mutually invisible. Muting removes someone from your feed without notifying them.
Per-post controls
For each post you can tighten or loosen the audience after publishing, choose who may comment, choose who may remix, toggle whether the original file can be downloaded, and set a post to disappear after 24 hours.
AI processing
When you run an AI operation, the source image and your prompt are sent to our AI provider(s) to produce the result. Prompts are retained so we can enforce safety and investigate abuse. See the AI Content disclosure for details.
Your rights: export and deletion
You can export your account data or delete your account at any time from your profile. Deletion removes your account and the stored image objects associated with it. Deletion is permanent.
Data retention and security
Content persists until you delete it or your account. Data is stored on dedicated infrastructure with encrypted transport (TLS). We apply rate limits to authentication, uploads, AI operations, and comments to protect the service and your account.
Contact
Questions about privacy: neima@nakhaee.us. See also the interactive Privacy checkup.