How Tataam looks after your photos

Tataam is made by Daniel Rachamim, an event photographer, for photographers and their clients. Questions or requests: photos@rachamimdaniel.com.

• Your account holds your name, studio name, email and, if you add them, a phone number and logo. Your password is stored only as a secure hash, never as plain text.
• Your galleries hold the photos you upload, their file names and the details you type (title, client name and email, event date).
• You decide who gets each gallery's code, and you can change the code, take a gallery offline or delete it at any time.
• If you switch on two-step sign-in, Tataam keeps the secret for your code app (locked with the server's key) and your backup codes (scrambled, so they can't be read back). With Touch ID or Face ID, your phone or computer keeps the private part; Tataam keeps only a public key and the device's name.
• So you can see where you're logged in (on your Account page), Tataam keeps a short description of each sign-in, such as "Safari on Mac", with when it started and when it was last used.

When someone types a wrong password, sign-in code or gallery code, Tataam counts it for a while (from 15 minutes to a day) so nobody can keep guessing. Where a count goes by internet address, the address is kept only in scrambled form, which can't be turned back into the address, and it's deleted within a day. Gallery code counts are kept only in the server's memory, never saved.

• Tataam runs on a server in Germany (Hetzner). Small preview copies of the photos are kept there so galleries open quickly.
• The full-size photos are kept in Google Drive storage that Tataam manages. They are not shared publicly there.
• A copy of the database (accounts, galleries, favorites) is made every night and kept for 14 days, in case something goes wrong.
• When a photographer deletes photos or a gallery, the files go to the Google Drive bin, which Google empties after 30 days.

• A gallery opens with its code, or straight from the link the photographer sends (the code is inside it). Once in, your browser remembers it for that gallery for a year, renewed on each visit. A photographer can also choose to let a gallery open from its link without any code: then anyone who has the link can see it.
• Before the code is entered, the gallery's name and cover photo are shown (also in link previews), unless the photographer chose to hide them.
• Galleries are marked so search engines don't list them. That is a request to search engines, not a lock: the code and the private link are what keep a gallery private.
• So the photographer can see how the gallery is used, Tataam counts gallery visits, how many different people came, who is in the gallery right now, photos viewed full screen, hearts, downloads, Find me searches and shares, and whether a visit came from a phone, tablet or computer.
• To tell different people apart without knowing who they are, your browser keeps a random number (the same one used for hearts). Tataam mixes it with the gallery and a secret before storing it, so it can't be matched across galleries or traced back to you. While the gallery is open, the page tells Tataam you're still there once a minute. No addresses are stored and no cookie is set for this. Where the browser keeps nothing, a one-way code that changes every day is used instead.
• Favorites lists: the name you give a list (for example "Mom" or "Wall print"), its photos and any note you add can be seen by the photographer and by everyone who can open the gallery.
• The number next to a heart shows how many people chose that photo: each saved list counts once, and so do hearts not saved to a list yet. To count your own hearts only once, your browser keeps a random number (no name). Those hearts stay on the server until you save them to a list or clear them.
• You don't need an account. You can take photos out of a list yourself; to remove a whole list or a note, ask your photographer or write to us.

• You can tap a person in one of the gallery's photos, or use a selfie. Either way the faces are compared on your own phone, and a selfie is never uploaded or saved.
• To make the search possible, Tataam keeps a short list of numbers for each face in the gallery's photos (a face template, not a picture). These are made in the photographer's browser after upload and are deleted together with the photo or gallery.
• Find me helps you find photos you appear in. It is not a password: everyone with the gallery code can see all of its photos.
• Photographers can switch Find me off for any gallery.

• A photographer can design a printed album from a gallery and send the clients a private link to look at it. Anyone with that link can see the album, leave notes on its pages with the name they type, and approve it. The photographer sees the notes and the names.
• Your browser remembers the name you typed and a random number (no name), so your notes show as yours and you can remove them.
• A photographer can also invite an album designer through a private link. Tataam keeps the designer's name and email, as the photographer typed them, and emails them the link.
• Print files for the lab are made on the Tataam server and kept for 3 days, so the photographer can download them. Tataam doesn't send them to any lab.

• A photographer can switch on a public page (tataam.com/p/…) with photos they chose from their own galleries, where they work and how to reach them. It's public and search engines may list it. Photographers choose only photos their clients agreed to show.
• When you write to a photographer through their page, Tataam keeps what you type (your name, email or phone, the event date and type, and your message) so the photographer can read it, and emails it to them. Tataam doesn't use it for anything else. The photographer can delete it, and it's deleted with their account.
• To stop floods of messages, Tataam counts how many come from one internet address (scrambled, not kept with the message) for an hour.

Tataam sends a few emails, such as "your photos are ready" and password resets, through Resend, an email delivery service. We don't send newsletters or marketing emails.

When you ask for early access, we keep your name, email, and the link and note you give, only to reply and invite you. Ask us any time to delete them.

The help assistant (“Questions?” on the website, “Need help?” in galleries) answers with Claude, an AI made by Anthropic. What you type there is sent to Anthropic only to write the answer, and Anthropic doesn't use it to train its AI. Tataam doesn't keep the questions or the answers, only how many there were. The conversation stays in your browser tab and is gone when you close it. Please don't type passwords or other private details there.

Only the ones Tataam needs to work:

• For photographers: one that keeps you logged in (30 days); if you tick "Don't ask again on this computer", one that skips the phone code on that computer (30 days); and short ones used only while logging in or connecting Google Drive (gone after 10 minutes at most).
• In galleries: one per gallery that remembers its code, and one that remembers the language you picked (a year).

Your choice of layout, your favorites list and your name on album notes are remembered in your browser, not in cookies. No advertising cookies, and no outside analytics or trackers: the only statistics are the anonymous gallery counts described above, for the photographer of that gallery only.

You can ask to see, correct or delete the information Tataam holds about you by writing to photos@rachamimdaniel.com. Photographers can delete their galleries themselves at any time, and their whole account on request.