Your photos
GotoArc processes photos locally on your computer. The website does not accept photo uploads, and the desktop application does not send photos to our servers for culling, retouching, album design or delivery.
GotoArc
Privacy Policy
Last updated: October 2026
This policy explains what the GotoArc website collects and how the desktop application handles your data.
Website analytics
We record page views, language, referrer, user agent and a salted hash of the IP address to understand traffic and improve the site. We do not use advertising cookies or sell data.
Licensing
If you create an account or activate a license, we store your name, email, password hash, language, license key, plan, expiry, payment reference (Stripe session and amount) and the device identifier required to enforce the license. Card details are handled by Stripe and never reach our server. Device identifiers are not used for advertising.
Contact messages
When you use the contact form, in the website or in the app, we store your name, email, topic, message and source to answer your request. We do not add you to a marketing list without consent.
Account emails and security
We send welcome and email-verification emails, and password-reset emails when requested. Verification and reset tokens are stored as hashes, are single-use and expire (24 hours for verification, 60 minutes for reset). You can request a new verification email from your account.
Payments
Card payments are processed by Stripe. We receive the payment status, amount, currency and a payment identifier, not your full card number. Invoices and receipts are provided by Stripe or on request.
Retention and rights
Analytics records are kept for a limited period and automatic database backups are deleted after 3 days. You may request access, correction or deletion of personal data through the contact form.