Privacy policy

Last updated: 21 Oct 2026

Fotoreto is a photo editor that runs in your browser. The most important part of this policy: your photos never leave your device. Opening, colour editing, blemish removal, object removal and exporting all run on your own device. No photo is sent to our servers or anyone else's.

This policy covers the website https://fotoreto.com and the photo editor at https://app.fotoreto.com/?lang=en, built and operated by Nguyễn Hoàng Phúc (Hoàng Phúc Photo).

Who is responsible

Data controller and processor: Nguyễn Hoàng Phúc — Hoàng Phúc Photo. Privacy contact: [email protected].

What we do NOT collect

  • The photos and RAW files you open, or their metadata (camera, lens, GPS location).
  • Your edits, looks, the .cube LUTs you add, or the watermark you apply.
  • Faces detected in your photos (used for skin smoothing and face shaping): detection runs on your device and the results stay in your browser.
  • Names, phone numbers, contacts. The app works fully without an account; accounts are optional (see below).

What is stored on your device

So you can resume an unfinished edit and work offline, the app stores some data in the browser on your device (IndexedDB, Cache Storage, Local Storage):

  • The photos you are editing, your edits, small previews and computed results (fills, depth maps).
  • Your choices: Simple / Full mode, brush sizes, whether you have seen the tour, before/after frame settings.
  • Your own looks and LUTs, and "My style" learned from how you edit.
  • The app's own files (code, AI models, built-in looks) so it opens fast and works offline.

None of this is sent anywhere. You can delete it at any time by clearing site data for https://app.fotoreto.com/?lang=en in your browser settings.

If you create an account (optional)

You only need an account to get extra looks through a referral code, to refer friends, or to buy Premium. You sign in with a code sent to your email — there is no password. With an account, our account server stores:

  • Your email, when the account was created, your referral code, who referred you and whom you referred (status only, nothing else about them).
  • Your entitlements: look tier, Premium expiry, and where they came from (referral, purchase).
  • Sign-in sessions: browser and OS name (e.g. "Chrome · Windows"), IP address and last use — to limit how many devices can be used at once and to show you which devices are signed in.
  • A random install ID of the app on your device and the IP address at sign-up — only to detect self-referral (reward fraud). It is not a device fingerprint.
  • When you save photos while signed in (a timestamp only — no photo, file name or content) — to count successful referrals.
  • Paid looks delivered to your account carry a hidden mark with your account number, so leaks can be traced.
  • Notifications we send you in the app, and whether you have read them.
  • Newsletter: only if you tick "Get news" in your account profile yourself (untick any time).

When you buy Premium

We store the order: plan, amount, payment method, time and order code; if you need a company invoice, also the company name, tax code, address and invoice email. We never see or store your card number or your bank / PayPal sign-in.

  • Bank transfer / VietQR: your bank sends the money; SePay (a transaction-matching service) tells us the amount, transfer reference and transaction ID of incoming payments to our account so Premium unlocks automatically. The VietQR image is generated by SePay (your browser loads it from qr.sepay.vn with the amount and order code).
  • PayPal / international card: you pay on PayPal's page; PayPal tells us the result, amount and transaction ID.

Orders and invoices are kept for the period required by accounting and tax law.

Anonymous statistics in the app

To understand how the app is used (how many devices open it, import photos, save photos, open the Premium window…), the app sends a few such milestones — each at most once a day — with a random ID that changes every day. No cookie, photo, file name, photo metadata, email or account ID is sent, so nobody (including us) can follow you across days. The server only keeps daily counts; the random IDs are deleted after 3 days. If your browser has "Do Not Track" or Global Privacy Control enabled, the app sends nothing.

Each time it opens, the app also asks the server whether there is a "free Premium for everyone" period (nothing about you is sent).

The account server runs on Cloudflare (Workers, R2), the database is hosted by DigitalOcean (Singapore) and emails are sent through Amazon Web Services (Amazon SES); newsletters for people who subscribe go through our Sendy system (using Amazon SES); payments go through SePay and PayPal. They process data on our behalf and only to run the service; account data is therefore stored and transferred outside Vietnam, encrypted in transit.

We only email you when your account needs it: sign-in codes, reward notices and payment receipts. No newsletter or marketing unless you subscribe yourself. Account data is kept until you ask us to delete the account ([email protected]); logs about rewards and payments may be kept longer where the law requires.

What the server logs when you visit

When your browser loads a page or an app file, the web server (and any security or speed service in front of it) keeps technical access logs: IP address, time, the file requested, browser type and referring page. These logs keep the service secure (blocking scans, denial-of-service attacks and hotlinking) and help fix errors. They are not used for advertising and are deleted according to the hosting provider's retention period.

The website https://fotoreto.com (not the app) uses Google Analytics 4 to learn which pages help — only after you click "Accept" in the cookie bar; until then the page loads nothing from Google. Once you accept, Google (Google Ireland Limited / Google LLC, processing data on our behalf, possibly stored outside Vietnam) receives: the pages you view, time spent, traffic source, device type, browser, approximate country and the random ID in the _ga cookie. Google Analytics 4 does not store IP addresses. We only look at aggregate numbers and never use them for advertising; data is kept for at most 14 months. Legal basis: your consent — withdraw it any time via "Cookie settings" in the footer. The website has no advertising, social media buttons or third-party fonts. Details: Cookie policy.

When you contact us

If you email or message us, we receive what you send (name, email address, message) and use it only to reply. Please do not attach private photos unless needed.

We process personal data under Vietnam's Personal Data Protection Law No. 91/2025/QH15 and its implementing Decree 356/2025/ND-CP. For access logs and messages you send, the basis is keeping the service secure and handling your own requests. For account data, the basis is your consent when you create the account and providing the service you asked for (entitlements, referral rewards).

Your rights

You have the right to be informed, to give or withdraw consent, to access, correct and delete your personal data, to restrict or object to processing, and to complain, as provided by law. Send requests to [email protected]; we reply within the legal deadline. We never keep your photos; most data is on your device and you can delete it yourself.

Children

Fotoreto is not directed at children under 16 and does not knowingly collect children's data.

Changes

When this policy changes, the "Last updated" date at the top changes too. Important changes (for example when paid plans arrive) will be announced on the website and in the app before they take effect.