Privacy Policy

Last updated October 26, 2026

Privacy is the default on Retrat. This policy explains what we collect, why, and who can see it.

What we collect

• Your account: email address, username, display name, and password (stored only as a secure hash).
• What you share: photos, captions, alt text, comments, albums, circles, and saved posts.
• Your connections, requests, invitations, mutes, and blocks.
• Basic technical data for security, such as sign-in times and information about the device you signed in from.

Who can see what

• New profiles are private: only you and your connections can see them.
• Each post is visible only to its audience. Nobody else learns who a post was shared with.
• Your circles, saved posts, and mutes are visible only to you.
• Comments are visible only to people who can see the post, and are connection-only.

How we use it

To run Retrat: to show your photos to the people you choose, send the notifications you ask for, keep accounts safe, and review reports. We don’t sell your data, and there is no advertising and no algorithmic feed.

Cookies

We use only the cookies Retrat needs to keep you signed in and to protect your account from forged requests.

Your choices

You can change your profile’s visibility, each post’s audience, and your notification settings at any time, and delete posts you no longer want to share.

You can close your account from Settings, on the website or in the app. Deactivating hides your profile, posts, and comments until you sign in again. Deleting hides them right away and, after 14 days, permanently removes your account with your photos, comments, and connections; signing in before then keeps it.