Your archive stays yours

Privacy at FotoBrain.

Website and account portal · Updated September 13, 2026

Your account

FotoBrain stores your chosen username, display name, and account identifier. Sign-in uses a passkey: your device or password manager keeps the private key, while FotoBrain stores the public key and credential identifier used to verify your sign-in. No Google account, email address, or social login is required.

Your device handles any Face ID, Touch ID, or device PIN check. FotoBrain does not receive your fingerprint, facial scan, or device PIN. Your passkey provider may sync your passkeys according to your settings.

Recovery

After signup, FotoBrain shows a recovery code once and stores only its hash. Keep your code safe: someone with your username and recovery code can recover your account. Recovery replaces prior passkeys, ends existing sessions, and issues a new recovery code. Without a working passkey or recovery code, this release cannot restore your access.

Your photos

This release of the website does not upload, read, or store your photo library. Connecting a computer or a cloud photo provider will require a separate setup in a future release. No cloud photo permissions are requested during signup.

Hosting and cookies

Cloudflare hosts this website and stores account, workspace, and session records. It processes network requests, including IP addresses, to deliver and protect the site. FotoBrain uses essential cookies for sign-in and session security. Sign-in challenges expire after five minutes, sessions expire after seven days, and temporary rate-limit records use hashed network identifiers. This site does not include advertising or third-party analytics scripts.

Account controls

Log out to end the session on your current browser. From a signed-in workspace, you can delete your website account, its workspace record, and all of its active website sessions. This does not delete any photographs on your computer or remove the saved passkey from your device or password manager.

Operational logs and provider backups may have separate retention periods. See Cloudflare’s privacy policy for its processing.

Separate local installations

A local FotoBrain installation has its own library, people, reviews, and permissions. This website’s account system does not automatically inherit access to an existing installation.