How your photos are handled
Who sees what
You only see photos you're in. Nobody can browse the whole collection except the two student photographers who run this site.
A group photo is visible to everyone in it who has signed up. If five of you are in a photo, all five can see and download it.
Face matching is optional
If you turn it on, you do a 5-second face scan with your camera. A photographer checks that it's really you before anything is matched, so nobody can sign up with your face to get your photos.
After that check, the scan images are deleted. We keep only face templates: lists of numbers computed from your face at a few angles, used to find you in new photos. They aren't pictures and can't be turned back into one.
Matching runs on this site's own server. Your scan and the photos are not sent to any outside company, and they are never used to train anything.
Matching makes mistakes. Matches we're unsure about are checked by a photographer first. If you see a photo that isn't you, tap "This isn't me".
Deleting
You can turn off face matching at any time on the Face matching page. That deletes your face template and every automatic match right away. Photos a photographer tagged you in by hand stay until you ask to remove them.
You can ask for any photo of you to be taken down. It disappears from your photos immediately, and a photographer reviews the request.
Downloads
Downloads are the original files from the camera, at full quality. We remove location data from the file if there is any. The picture itself is untouched.