What we collect
Your account details: email and display name. There are no passwords — you sign in with a one-time code we email you, and we only ever store a hash of it, briefly.
The photos you upload, with their EXIF intact — capture time, camera, lens and settings. That metadata is the point of Panoramble, so we keep it; we never silently strip it the way other platforms do.
The stops, stopovers and field notes you write, and the precision setting you choose for each location.
Basic request logs (IP, browser) kept 30 days for security and abuse prevention, then deleted.
If you subscribe to a paid plan, your card details go to Stripe, our payment processor — they never touch our servers. What we keep is the subscription record: your plan, its status, and the Stripe customer and subscription identifiers that link to it.
Location data and precision
A photo's GPS coordinates are yours to expose or hide. Every stop carries a precision setting — exact, fuzzy, or area — that you control.
When you choose fuzzy or area, the true coordinates never leave our server. We serve a jittered or generalised point to everyone else, including our own public API. Fragile ground stays protected even from us in transit.
How we use it
To run the service: show your photos, build your stopovers, score Sundial recommendations, and keep the lights on.
To moderate: automated checks (EXIF coherence, sun position, C2PA) help us triage flags. A human makes every enforcement decision; the automated signal is never the verdict.
What we never do
We never train AI models on your photographs, and we never license your work to anyone who does.
We never sell your personal data, and we never sell or sublicense your images.
We never run a repost button, because no one should be able to pass your photo off as theirs.
We never strip your EXIF credit from the file you uploaded.
We never publish your GPS. Files we serve carry no location data at all — the only location anyone sees is the pin you set, at the precision you chose.
Deleting your work
Delete a photo and our licence to display it ends the same second. The master is purged from storage and removed from every rendition queue.
Delete your account and everything goes with it within 30 days — photos, notes, stopovers — except the minimal records we are legally required to retain (e.g. a flag we were ordered to preserve).
Your rights and contact
You can export your data, correct it, or ask us to delete it, at any time, from settings or by email.
We are a UK company and follow UK GDPR. Our data-protection contact is privacy@panoramble.app; you also have the right to complain to the ICO.
Questions about any of this? Get in touch