Last updated July 27, 2026
Our Heroes ("we," "us," or "our") operates ourheroes.app (the "Service"), which lets people create and host photo galleries for the people, pets, and moments they love. This policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the collection and use of information as described here.
Account information. When you create an account, we collect a username, email address, and a password — which we never store in plain text; it's hashed before it touches our database. Collaborators invited to someone else's gallery provide the same information, minus anything gallery-specific.
Content you upload. Photos and videos you add to a gallery, along with captions, gallery titles, taglines, quotes, footers, story text, and section headers you write.
Awards and testimonials people leave. Anyone who can see a gallery can leave a testimonial or give an award on it. When they do, we store the message, the name they give, and — if they were signed in — a link to their account, which is what puts a verified check beside their name. We also record the sending computer's IP address, kept only so we can deal with spam and abuse. The gallery's owner reviews every submission before it appears, and can hide or remove one at any time. These are part of the gallery, so they're deleted along with it. A gallery owner may also bring across notes from a guestbook that existed somewhere else before, in which case they carry their original dates and whatever name the writer used at the time.
Payment-related information. We don't process or store your card details ourselves. Purchases (access codes, additional photo capacity) are handled entirely by Stripe, our payment processor. We only receive confirmation that a payment succeeded and what you're owed as a result.
Collaborator invitations. If you invite someone to collaborate on your gallery by email, we store that address and whether the invitation was sent successfully, so you can see the status of your invites.
Whether your uploads worked. When you upload photos, we record that an upload happened and how it ended — how many photos you selected, how many arrived, and whether it succeeded, was refused, or failed partway. We keep this because when an upload fails badly enough, our server doesn't survive to notice, and without a record from your browser we'd have no way of knowing your photos never made it. It covers the upload itself, not the content of your photos, and it's deleted with your account.
Visits to public pages. On our public pages — the ones anyone can see without signing in, such as the home page, our guides and policy pages, and public gallery pages — we count page views so we can see which parts of the Service people actually use. That means the page visited, the site you arrived from, and general browser, device, and country information. It runs on software we host ourselves, so this information isn't handed to an analytics company. It sets no cookies, it isn't used to build a profile of you or to follow you across other websites, and it doesn't identify you.
Two kinds of page are deliberately left out. We don't count signed-in pages — your dashboard, the gallery builder, settings, uploads, or your account. And we don't count any page whose web address contains a private link or token, such as a password-reset link, a collaborator or group invitation, or a private view link, so those never reach our page-view records at all.
Cookies. A single session cookie keeps you signed in. It's required for the Service to work and isn't used for advertising or tracking across other websites. We don't use third-party analytics or advertising trackers — the page-view counting described above runs on our own infrastructure. If that ever changes, we'll update this policy.
Galleries are public by default. Anyone with a gallery's link can view it, unless you set a viewing password in Gallery settings → Privacy. This is a core part of how Our Heroes works — galleries are meant to be shared. If you want to restrict access, set a password before sharing a gallery, and be mindful of what you upload to a public one.
Collaborators you invite can add, caption, and rearrange photos in a gallery, but never see your account password or change gallery settings.
We can see gallery and account metadata to provide support, respond to abuse reports, and maintain the Service. We don't edit your galleries' content or settings.
Running Our Heroes means some of your data passes through services we rely on:
Each provider has its own privacy practices governing the data it processes for us.
You can delete a photo, a whole gallery, or your entire account at any time from Gallery settings. Deleting a gallery removes its photos from storage; deleting your account removes every gallery you own and your account record. There is no undo — we don’t offer a way to restore something you’ve deleted.
Backups are the one exception worth naming. We keep encrypted backups of our database for up to 90 days, and an off-site copy of photographs so they survive a storage failure. Deleted content can persist in those copies for a period after you remove it. We don’t use them to bring back anything you’ve deleted, and they never serve your gallery — they exist so that a technical failure doesn’t cost you everything.
Some information may be retained by our third-party processors — for example, Stripe retains payment records as required by law — even after you delete your Our Heroes account. That's governed by their own policies, not ours.
Our Heroes is not directed at children, and you must be at least 18 years old to create an account. We understand galleries often contain photos of children (and pets!) — that's expected and welcome — but the account holder uploading and managing that content must be an adult. We do not knowingly collect personal information directly from children under 13.
We take reasonable measures to protect your information, including hashed passwords and signed, HTTP-only session cookies. No online service can guarantee perfect security, so we can't promise your information will never be exposed, but we work to keep it safe.
We may update this policy from time to time. We'll update the date above when we do. Continued use of the Service after a change means you accept the updated policy.
Questions about this policy or your information?
Reach us through our contact form.