Data protection, minors and security
A photograph of an identifiable person is personal data, and a child's doubly so. FotoHook is built taking that as given, not as a box to tick at the end.
What it does
Files do not live in a public folder. They are stored outside the web directory and served one at a time after checking who is asking: there is no guessable URL and no folder that can be listed.
Sign-up asks for the date of birth. If the person registering is under fourteen, an email goes to their guardian and the account cannot upload their photograph until they confirm, as Article 8 of the Regulation and Article 7 of the Spanish law require.
Cookie consent is stored with proof: what was accepted, when, and against which version of the inventory, with the IP address kept as a hash rather than in the clear. The cookie inventory is a single source that both the policy and the banner read from, so they cannot contradict each other.
The public site loads nothing from third parties for the essentials: fonts are self-hosted and libraries are served from our own domain, so visiting it does not send anyone's IP address to a third party without grounds.
And underneath, the basics: bcrypt password hashing, CSRF protection on every form, rate-limited sign-in attempts and servers in Spain.
How it works, step by step
You are the controller of your photos
FotoHook is the processor: it handles your clients' data on your behalf and on your instructions, with the Article 28 agreement included in the terms.
Galleries are born private
There are no public galleries and no open links by default. To see a photo you need access to its group.
Minors go through their guardian
Sign-up with date of birth, email to the guardian and upload blocked until it is confirmed.
Downloads leave a trail
Every authorisation records who, what and when, with a maximum number of uses and an expiry date.
Deletion means deletion
When you remove a photo, an event or a client, their files and associated data go too.
Details worth knowing
Data in Spain
The service and the files are hosted on servers located in Spain, with no international transfers.
bcrypt passwords
No recoverable passwords are stored: not even we can read them.
CSRF and rate limiting
Every form carries an anti-forgery token and sign-in attempts are limited per IP address.
A single cookie inventory
One source of truth for the policy and the banner. Changing a cookie bumps the version and consent is asked for again.
No third-party resources
Self-hosted fonts and libraries: no visit to the public site sends data to an outside domain.
Complete legal texts
Legal notice, privacy, cookies, terms of use, terms of sale and right of withdrawal, in all five languages.
Who it is for
If you photograph schools, children's clubs or any event involving minors, this is not optional: it is the first thing the school and the families will ask you about.
And in social photography it is what lets you answer calmly when someone asks where their photos are and who can see them.
Frequently asked questions
You are. FotoHook is the processor and handles that data solely to provide you with the service, with the Article 28 agreement included in the terms.
You delete them from the dashboard and they are gone, from storage too. If the person has an account, you can delete it along with their data.
To process the data of a child under fourteen, yes. FotoHook requests it from the guardian automatically at sign-up and blocks the upload until it is confirmed.
On servers located in Spain, outside the web server's public directory.
Yes. Most studios do not need a data protection officer; what they do need is for the processing to be in order, which is what this takes care of.
Ready to take
your galleries to the next level?
Tell us what you do and we'll show you how FotoHook fits your business.