Every photo lives on one dedicated server that we run ourselves. No cloud provider, no third-party CDN, no image host ever gets to see your files.
You also won't find any trackers here: no Google Analytics, no Facebook pixel, no ad scripts. A strict Content Security Policy blocks anything that isn't ours.
Links can't be shared or hot-linked
Each picture is delivered through a signed link that expires after a short window. Copy the image address and paste it somewhere else, and it simply won't work.
Any request without a valid signature gets turned away by the web server before our app even sees it. And every picture is marked "noindex, noimageindex", so it won't turn up in Google Images or any other search engine.
Your original file stays private
The file you upload sits in a private area that isn't reachable from the web at all. Only automatically resized copies are ever shown.
Those copies are re-encoded from scratch, so camera metadata like model, GPS location, date and time never travels with them.
You decide what's visible
Once you've uploaded, you can pixelate anything you like: a face, a tattoo, something in the background, whatever might identify you.
You pick the category, you say whether it's an "I am in it" photo, and you can delete your pictures from your Member Center whenever you want. They disappear from the site right away.
Profile photos are never rated and never appear in the public feed.
A person looks at everything first
Every upload waits for approval from the site team. We check for duplicates, for stolen or AI-generated content, and for anything that breaks the rules before it goes live.
Anyone can report a picture with a single click, and reports go straight to a moderator.
Verified members get their seal only after we've manually checked a verification photo. Those photos are visible to the administrator alone and are never published.
Your account is well protected
Passwords are stored with modern bcrypt hashing, and older ones from the previous site version are upgraded automatically the first time you log in.
You can also skip passwords entirely: log in by e-mail link, with a passkey (fingerprint, face, or device PIN), and soon via Telegram. Passwordless logins can't be phished.
Logins, uploads, messages and the contact form are all rate-limited against brute force and spam. Everything runs over HTTPS with HSTS, and session cookies are HttpOnly and protected against cross-site requests.
We keep as little about you as possible
Your IP address is never stored in plain text. We keep a keyed one-way hash instead — enough to catch abuse and duplicate votes, useless for identifying you.
To register you need a username, an e-mail address and your age confirmation. That's it. With Telegram login you don't even need the e-mail.
Private messages stay private. They're not displayed anywhere and never indexed.
A tidy, well-kept platform
The site runs on current software (PHP 8.4, Laravel, MySQL 8) with the security headers browsers expect: no framing by other sites, no MIME sniffing, no referrer leaking.
Backups run nightly, so nothing gets lost. And every upload is validated as a genuine image file with sensible dimensions — nothing else ever makes it onto the server.