Privacy Policy
Effective October 1, 2026
mosaics.photo is operated by Three Point Group, LLC (“we,” “us”). This policy explains what we collect when you use mosaics.photo, how we use it, and the choices you have. Questions? Email bruce@craftclub.org.
What we collect
- Your Google account basics. You sign in with Google. We receive your name, email address, profile picture and a Google account identifier. We never see your Google password.
- Photos you upload. Your browser shrinks each photo to at most 2,048 pixels on its long side before uploading it. We then make smaller copies (1,200, 600 and 200 pixels) used to show your photos and build mosaics, and we record each photo’s file name and color measurements.
- Photo metadata. Photos can carry hidden details such as the date, camera and location. The copies we make don’t keep these details. If your browser can’t shrink a file before upload (for example, some HEIC files), the file is stored as you uploaded it and may still contain them.
- Project names and other settings you create.
- Technical information. Like most websites, our hosting providers automatically log information such as your IP address, browser type and the pages you request, to run and secure the service.
- Browser storage. The site stores a few things in your own browser: your sign-in session, the project you last used and the pictures you recently made mosaics from. We don’t use advertising cookies or third-party analytics.
How we use it
- To run mosaics.photo: store your photos, build your mosaics and show them to you.
- To keep the service secure and to prevent abuse.
- To contact you about your account or important changes.
- To comply with the law.
We don’t sell your personal information, share it for advertising, or use your photos to train artificial intelligence models. We don’t access your photos except as needed to operate the service, when you ask us to help with a problem, or to investigate abuse or meet a legal obligation.
Who can see your photos
Your photos and mosaics are private to your account. Image files are delivered through long, hard-to-guess web addresses so your browser can load them quickly; anyone who obtains one of those addresses could view that image, so please don’t post them publicly. If we add sharing features, you’ll choose what to share.
Service providers
We use a small number of providers who process data on our behalf: Google (Firebase Authentication, Cloud Firestore and Cloud Storage, with data stored in the United States) and Vercel (website hosting). They may only use your data to provide their services to us. We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or reorganization of our business.
Keeping and deleting your data
We keep your photos until you delete them. Deleting a photo from your dashboard removes its record and all of its stored copies; residual copies may remain in our providers’ systems for a short time. To delete your whole account and everything in it, email bruce@craftclub.org from the address you sign in with.
Security
Data is sent over encrypted connections, and each account can reach only its own photos. No system is perfectly secure, but we work to protect your information.
Your rights
Depending on where you live (for example California, the European Union or the United Kingdom), you may have the right to access, correct, delete or receive a copy of your personal information, and to object to certain uses of it. Email us to make a request; we won’t treat you differently for doing so.
Children
mosaics.photo isn’t intended for children under 13, and we don’t knowingly collect their personal information. If you believe a child under 13 has given us information, contact us and we’ll delete it.
Changes
We may update this policy. If we make significant changes, we’ll tell you on the site or by email before they take effect. The date at the top shows when it last changed.