Security

We take the safety of your galleries seriously. Here's how Lensdrop is built to protect your work and your clients.

Access control

• Unguessable links: every gallery has a private, random share link.
• Optional PIN: gate viewing behind a per-gallery code.
• Watermark and download gates: watermarking and downloads are separate per-gallery switches. A watermarked gallery serves watermarked files even on download; clean, full-resolution originals (and the bulk download) are only handed over when you turn the watermark off, and only when you enable downloads.

Infrastructure

Photos are uploaded directly to object storage and served through an edge worker, so the bytes never pass through our app server. Connections use HTTPS, and access to originals is granted via short-lived signed URLs. We run on established cloud providers; the specific services we use and how they handle data are listed in our Privacy Policy.

Authentication

Sign-in uses email one-time codes or Google OAuth, handled by our auth provider. We never store your password.

Reporting an issue

Found a vulnerability? Please email security@lensdrop.app and we'll respond quickly.