How we handle your photograph.
Still Treasured uses automated image processing to restore photographs. You see a screen preview before deciding whether to order. Colour and rebuilt details are interpretations; please check faces, likeness and the whole photograph before purchasing.
What you send
Send a photograph you have permission to use. We collect the photograph and your email address to prepare the restoration and send its progress and preview links. Uploading does not subscribe you to marketing.
Services involved
Our website uses Vercel for hosting and photograph storage, Supabase for restoration records and full-resolution files, OpenAI for photograph classification and restoration, Resend for emails, and Cloudflare for the security check and email forwarding. Processing can take place outside your country, including in the United States.
If you order, Shopify handles checkout and payment. Printify and the canvas provider receive the chosen print artwork and the delivery details needed to make and ship it. The bundled download matches the restoration style you purchase.
Links and storage
Your result link and photograph links allow access to anyone who has them. Keep them private. Full-resolution restoration masters use private storage; the original upload and screen previews use unlisted, unpredictable links.
We delete unpurchased photographs and restored files after 90 days. Ordering a canvas protects the associated files from that deletion so we can complete the order and handle support. Purchased download links last seven days; save your downloaded file to keep it.
Studio reporting
On the public home and photo restoration pages, we also count preview-button clicks, upload-form views, photograph selections, submission attempts, uploads started and fixed validation-error categories. We store daily totals by public ad identifier and page, without cookies, visitor identifiers, filenames, email addresses, photographs or individual browsing histories. These counters stay within our studio reporting and are not sent to Meta or Google. Repeat visits and bots can affect the totals.
We count arrivals from our ads using daily totals for the public ad identifier, platform and country group. These counters do not store an IP address, browser details, click identifier, tracking cookie or visitor record, and are not shared with advertising services. Repeat loads may be counted more than once. We also record when a released preview is first opened and when checkout and payment occur to understand how our service is used. Photographs and private preview links are not included in aggregate ad reports. Authorized studio access can view uploaded photographs and restored previews in a private quality-review gallery to check restoration quality and handle support. Photographs are not shared with advertising services.
Optional landing-page feedback
If you choose to answer the landing-page question, our studio receives your selected reason and any words you submit, plus the public page and ad identifier when present. No photograph, email address, click identifier or private preview link is attached. An in-memory submission reference lets you update your answer in the same page; it is not saved in browser storage. A separate salted, daily rotated address hash limits spam; raw addresses are never stored, and these quota counters are removed after two UTC dates. Comments are deleted after 90 days; anonymous reason totals may remain. These voluntary answers are not shared with advertising services. Please leave out contact details and private photograph links.
Optional ad measurement
On our public landing page, you can allow or decline ad measurement. If you allow it, a first-party cookie remembers an opaque attribution reference for 30 days. We record public ad identifiers and, when available, the Meta or Google click identifier. The reference follows your restoration through its email return link and checkout without adding third-party trackers to the waiting or preview pages.
With consent, the public landing page loads the Meta Pixel in an isolated frame to report a page view. Meta receives your IP address and browser details through that connection and may use its own cookies where your browser permits. The frame is removed on navigation; it cannot access our application, photographs or private pages. Automatic event detection and advanced matching are disabled. For a consented Meta click, our separate server-side purchase reporting may send Meta the click identifier, checkout browser type, purchase time, currency and paid amount to measure and improve our ads. We do not send photographs, email addresses, names, delivery addresses, raw IP addresses or private preview links through the server-side purchase reporting system. Click identifiers and browser details are removed after 90 days. Aggregate ad and sales counts may be retained longer.
When Google ad measurement is enabled and you allow it, purchase reports may share a Google ad click identifier, an opaque order reference, purchase time, currency and the paid merchandise amount with Google. We do not send customer contact details or photographs, and do not grant permission for ad personalization. This reporting does not install Google trackers on waiting or preview pages.
You can change your choice using Ad measurement preferences on the home or photo restoration page. Declining or withdrawing prevents future measurement transmissions associated with that browser’s consent reference; it cannot recall events already shared. We also honor Global Privacy Control. A private email return on another device does not create a new tracking cookie.
Questions or removal requests
Email hello@stilltreasured.com for help with your photograph, a download or a removal request. Include your order number if you purchased. Please avoid forwarding your private result link unless it is needed for support.