Stillframe

Privacy

Each Stillframe instance is operated independently. The instance administrator chooses the media folder, application data storage, authentication policy, backups, and retention. Contact that administrator for questions about a particular instance or requests involving its data.

Media and library data

Stillframe reads media from the folder configured by the instance administrator. It stores its library index, annotations, preferences, and generated working files in the configured application data directory. In the supplied Kubernetes deployment, the media volume is mounted read-only.

Access

The hosted deployment protects the application and its API with HLab Auth. The home page and these information pages contain no photo library data. The instance administrator is responsible for limiting HLab Auth access and protecting the underlying storage and backups.

Telemetry and external services

When OpenTelemetry is enabled, the server exports operational traces and metrics to the collector selected by the instance administrator. Request query values and full URLs are redacted from traces. If map tiles are enabled in the library, the browser requests map tiles from OpenStreetMap; those requests are subject to that service's policies.

Stillframe does not include advertising or third-party behavioral analytics. The instance administrator controls telemetry retention and any infrastructure-level access logs. For specific questions about a running instance, see the contact page.