POLICY / Privacy and identity

Your archive, under your control.

Last updated October 21, 2026

What we collect

For invited accounts, Avitop stores an email address, public Pilot Name, passkey credential material, server-side sessions, security events, profile content, albums, photograph metadata, and private original files. A passkey private key remains on your authenticator and is never sent to Avitop.

Public and private identity

Your Pilot Name is the default public identity. Account email and private account identity are not published. A real name appears only when you separately enter the exact public name and enable publication.

Photographs

Original uploads remain in private object storage. Public pages use re-encoded display derivatives. Image metadata such as GPS and device information is not carried into public WebP derivatives. Captions, attribution, copyright, and alternative text may be public when you publish a photograph.

Security and operations

We process session timing, a one-way user-agent binding, security outcomes, and limited request context to prevent abuse and investigate incidents. We do not sell personal information or use Pilot Profiles for behavioral advertising.

Your choices

You can keep a profile draft, publish it, make it unlisted, or make it private. You may request an export, correction, unpublication, or deletion by emailing privacy@avitop.com. Legal preservation, fraud prevention, and backup expiry may delay final erasure.

Service providers and transfers

Cloud infrastructure providers process database, object-storage, delivery, and security data on Avitop’s behalf. Access is limited to operating and protecting the service.