Privacy notice: original photos are never uploaded, strips kept 14 days

On photobooth.joelin.cc's online photo booth, taking photos, uploading, compositing and previewing all happen in your browser, and the original photos you take are never uploaded. Downloading the finished strip requires signing in with a joelin.cc account: when you press download, the composited strip is saved to your account, and the full-size file is deleted automatically after 14 days.

This site is covered by the Joe Lin's Report network Privacy Policy and Copyright and Takedown Policy (which cover joelin.cc and all *.joelin.cc subdomains). This page is a site-specific supplement: it covers how photos, the camera and location are handled because this site is a photo tool, which the network policy does not address. Where the two set different rules on the same matter, this page prevails for this site. This page is a translation of the Traditional Chinese original; if the versions differ, the Traditional Chinese version prevails.

1. What data is processed

Photos you take: the camera feed is obtained through the browser's getUserMedia API, held temporarily in browser memory and released once compositing is done
Photos you upload: read through <input type="file">, displayed in the browser with URL.createObjectURL and released once compositing is done
The composited 4-frame strip: composited in the browser with HTML5 Canvas and converted to JPG with canvas.toBlob. When you press download, the strip is uploaded to this site's storage (Cloudflare R2, on Cloudflare's global network) and saved to your account, and at the same time downloaded to your device. The full-size file is deleted automatically after 14 days; the thumbnail stays in your account until you delete that strip or your account
Frame designs you make yourself: when you upload a frame, resizing, cutting out the photo windows, compression and checks all happen in the browser; the preview while you build the frame uses the site's built-in sample images, so your photos are not uploaded for this. Only when you press "Save this frame" is that frame PNG (and settings such as layout and background colour) uploaded to this site's storage (Cloudflare R2) and saved to your account. Only you can see it and it is never made public (site staff do not look at it on their own initiative; a specific frame is accessed or removed only to the extent necessary when we receive a rights claim or report, when required by law, or to deal with a system security problem). Before saving you must agree to the Custom Frame Upload Terms, and the site records the version of the terms you agreed to, and when, together with the frame. Frames are kept until you delete the frame or your account
Usage records of the online photo booth (from 10 October 2026): to improve the tool, the site records the steps you take in the online photo booth (for example pressing start, finishing the shots, which layout or frame you chose, whether a frame upload succeeded, pressing download), together with a randomly generated anonymous ID stored in your browser, the page language and your country (country only; no IP address is recorded). If you are signed in, your member identifier (sub) is also recorded. No photos, frame images or any text you type are included; the records are used only for the site's internal statistics and are not provided to third parties

2. Data this site's back end does not receive or store

❌ The original photos you take never leave your browser (taking, uploading, compositing and previewing all happen in the browser; the only things uploaded to this site are the composited strip created when you press download, and frame designs you actively save with "Save this frame"; see Sections 1 and 3)
Location coordinates: the browser only requests your location after you press "Use my location"; the coordinates are only used in the browser to calculate distances to locations, and this site's back end does not receive or store them
When you are not signed in, this site's own code does not store personally identifying data in cookies; the browser's Local Storage only holds a random anonymous ID (used for the tool usage records and the "Wish list" feature; see Section 1) and settings such as "announcements already seen", with no name, email or photos (cookies set by analytics and advertising providers are covered in Section 6)

3. Membership and your strips

How you sign in: member sign-in is provided by id.joelin.cc, using Google, Apple or an email link. This site never handles or stores your password
Member data this site stores: only your member identifier (sub) and your email (for display); no name, phone number or other personal data
Strip data this site stores: the strip files created when you press download, thumbnails, and metadata such as the layout you chose and when it was created
Purpose: so you can go back to "My photos" on any device and download your own strips again. This site never makes your strips public or provides them to third parties

4. Retention periods

Full-size strip files: kept for 14 days from upload, then deleted automatically by the system; after that the full-size file can no longer be downloaded
Thumbnails: kept in your account until you delete that strip or your account
Frames you save: kept in your account until you delete that frame or your account
Tool usage records: kept for 365 days, then deleted automatically by the system; when you delete your account, records carrying your member identifier are deleted with it
Member data: deleted when you delete your account

5. Browser permission requests

Camera permission: when you press "Start shooting", the browser asks for camera permission. You can refuse, and the tool switches to uploading photos instead
Location permission: the browser only asks for location permission after you press "Use my location". You can refuse and use the region list or address search instead
File download: when you press download after compositing, you are first asked to sign in with a joelin.cc account; after signing in, the browser asks where to save the file (or saves it straight to your downloads folder), and the same strip is saved to your account
Service Worker (PWA): on your first visit, the browser caches the site's code and styles (not your photos) so the app shell can open offline. You can clear this in your browser settings

6. Third-party services

Google Maps / map tile services: when a map loads, these services may receive your IP address, the time of the request and the approximate map area you are viewing; these requests are sent directly by your browser, and this site's back end does not store location coordinates
Cloudflare Pages: this site is hosted on Cloudflare, which may keep access logs for operational purposes
Google Search Console: the site owner uses GSC to see search impression data; it does not identify individual users
Google AdSense: since August 2026 this site has shown ads on some pages. Google and its third-party advertising partners use cookies to serve ads based on your previous visits to this or other websites. You can turn off personalized ads in Google Ad Settings, or manage other vendors at aboutads.info. After turning them off you will still see ads, but they will no longer be chosen based on your browsing history. Ads never get access to your photos: original photos stay in your browser the whole time, and strips are only stored in your account storage on this site; see Sections 1–4
Google Analytics 4: the Joe Lin's Report network (joelin.cc and all its subdomains) loads Google Analytics 4 (measurement ID G-DEW7FN5Z7D) at the site level through Cloudflare Zaraz, which the site owner uses to see traffic sources and how pages are used. It is injected at Cloudflare's edge and is not in this site's source code, so it applies to every page on this site; the related requests are sent by your browser directly to Google domains and set analytics cookies. For how to opt out, see the network Privacy Policy, or use your browser's own tracking protection
Analytics records for member sign-in: when you sign in to this site through id.joelin.cc, the site sends the sign-in event (first registration or a later sign-in) to Google Analytics 4 and uses an anonymous analytics ID, generated from your account identifier with a one-way hash, as the User-ID, to measure usage across devices and across sites (*.joelin.cc). The ID contains no name, email or anything that directly identifies you, and Google cannot use it to work out your account. Sending is governed by this site's cookie consent settings: if you have not agreed to analytics use, nothing is sent. The ID is removed from your browser when you sign out
This site does not use the Facebook Pixel (confirmed by browser testing of this site's pages on 30 August 2026). Apart from Google Analytics 4, Google AdSense and Google Maps (which only loads when you trigger it), this site has no other third-party tracking scripts

7. Children's privacy

This site is open to all ages. Browsing the site and using the photo booth tool do not require any personal data; this site only stores a member identifier and email (see Section 3) when you sign in to download a strip. We suggest that minors use the site with a parent, and that the parent decides whether to sign in.

8. Changes and contact

If this notice changes, this page will be updated and dated.
If you have any questions, please contact the site owner: joelin.cc

Last updated: 2026-10-10