Originals untouched
Originals and client previews are stored separately. Clients only ever see the optimised preview.
Security
Built to protect the files that matter.
Your photographs are your livelihood. Here is how PhotoSelections keeps them — and your clients’ data — safe.
Access controlled
Galleries use long random links, 6-digit access codes and rate limits, so they cannot be guessed or scraped.
Google Drive backup
Every upload is copied to Google Drive in organised folders, with stable file IDs stored for each photo.
Account security
- Passwords are stored as one-way bcrypt hashes and are never emailed.
- Email verification is required before using the dashboard; password reset links expire after 60 minutes.
- Sign-in and sensitive forms are rate limited to block brute-force attempts.
- Administrators can suspend accounts immediately if misuse is detected.
AI face search privacy
Guest selfies are stored privately (never on a public URL), are tied to a single gallery, and can only be viewed by platform administrators while processing a search.
Infrastructure
The application runs in isolated containers with a private database network. Traffic should always be served over HTTPS in production, and errors are monitored by our team in real time.
Reporting a vulnerability
If you believe you have found a security issue, please email support@pckey.in with the details. We will acknowledge your report within two business days.