Legal

Your email address, used to sign in and to contact you about your account.

Your name, username, and anything you choose to add to your profile — bio, location, website, avatar and cover photo. All of it is visible to other members except your email.

Your photographs, captions, gear details, comments, statuses and albums. All visible to other members, except albums you mark private.

The date you accepted these terms, and which version.

If you sign in with Google, Google confirms your email address to us and passes along your name and profile picture. We never receive your Google password, and we ask Google for nothing beyond that basic profile.

Reports you file: what you reported, the category you chose, and anything you typed. Reports are kept after they are resolved, because a pattern across several reports is often the only way a repeat problem is visible.

The 406: Montana can use your device's location to show you photographers working near you. The app asks once, shortly after you first sign in, and your device will ask you to allow or refuse it. Refusing is final — it is not asked again on that device. You can switch it on or off at any time in Account and security, and switching it off clears what was stored.

What is kept is deliberately coarse: your position is rounded to roughly eleven kilometres before it is saved, and the rounding is done by the database as well as by the app, so no version of the app can store anything more precise. One position is kept at a time and it is overwritten when you update it — there is no history of where you have been.

It is never shown to anyone. Not as a place name, not as a distance, not on your profile. Its only use is to order the For you feed. It is stored where nobody but you can read it — not other members, not moderators — and the feed reaches it only through a function that returns a distance, never a place.

This has nothing to do with your photographs. Location is never read from a photograph, whether or not you share your own — see below.

No advertising trackers, no third-party analytics, no data sold to anyone.

No GPS coordinates are read from your photographs — though see the EXIF note in the terms, because the coordinates may still sit inside the file you uploaded. This is true whether or not you have turned on approximate location above: the two are separate, and a photograph never contributes to either one.

The 406: Montana is members-only. Photographs, profiles, comments and albums are visible to signed-in accounts and are not served to anyone without one. This is enforced by the database, not by hiding a screen.

Private albums are visible only to you, on the same footing.

Image files themselves are served from a storage URL that does not check for a session, the way images on any website are. The addresses are long random strings and are not listed anywhere, but treat a photograph you have uploaded as something that could be viewed by anyone holding its direct link.

Your email address is never shown to other people. Neither is the fact that you reported something, or that you blocked someone.

Data is stored with Supabase (PostgreSQL and object storage). Passwords are hashed by the authentication provider and are never visible to this application or its operator.

If a CAPTCHA is enabled on signup, that provider sees your IP address as part of verifying you are not a bot.

Files in a paid vault are stored in a private bucket. Unlike photographs posted to the feed, they are not reachable by URL — every read is authorised against your session and expires shortly after it is issued.

Purchases are handled by Apple or Google. They tell us that a subscription is active and which plan it is for; they do not give us your payment details, and we never see a card number.

Deleting a photograph removes both the database row and the stored file. The same is true of a file in your vault.

Deleting your account is available in Account and security and takes effect immediately, and the same thing can be requested from /legal/delete-account without signing in. It removes your sign-in record, your profile, photographs, albums, statuses, comments, likes, follows, notifications and reports you filed, and empties both your photo storage and your vault. There is no waiting period and no way to undo it. Download anything you want to keep first — a paid plan does not slow this down or hold anything back.

Two things survive a deletion, deliberately. Comments other people left on your photographs go with the photographs. Moderation records — that an action was taken, when, and why — are kept without your profile attached, because a service that forgets its own enforcement history cannot enforce anything.

Copies may persist for a short time in the infrastructure The 406: Montana runs on — the database and storage providers keep their own operational snapshots — and those age out on the providers' schedules rather than on demand.

Questions about your data, requests for a copy of it, abuse reports and legal notices all go to cosmanophotography@gmail.com.