Privacy policy
Noodle Gallery is self-hosted software. Your photos, videos and personal data stay on your own server. We never have access to them.
Your data stays yours
Noodle Gallery runs on infrastructure you control. Photos, videos, metadata, face recognition data and user accounts are all stored on your server. The developers of Noodle Gallery have no access to your instance, your data, or your users' data.
Mobile apps
The Noodle Gallery mobile apps for Android and iOS connect straight to your self-hosted server. They do not contain analytics, tracking, crash reporting, or any code that sends data to us or to third parties. Traffic goes between the app and your server, nowhere else.
Location permissions (mobile)
The Android and iOS apps ask for location permission, for three on-device purposes. Location data is never transmitted to Noodle Gallery developers or any third party. It goes to your own self-hosted server only, and only in the ways described below.
- Photo and video EXIF location(
ACCESS_MEDIA_LOCATIONon Android, photo library access on iOS): when you upload or back up a photo or video, the app reads the location your camera wrote into the file's EXIF metadata and sends it to your server with the file. No separate location lookup happens. It is the GPS data your camera already recorded. - "Zoom to my location" on the map(
ACCESS_FINE_LOCATIONandACCESS_COARSE_LOCATIONon Android,NSLocationWhenInUseUsageDescriptionon iOS): one foreground location request, made when you tap the "locate me" control on the map screen. It centers the map view. Your device's coordinates are not stored or transmitted. - Wi-Fi-based backup rules(
ACCESS_BACKGROUND_LOCATIONon Android): on Android 10 and later, reading the current Wi-Fi network name (SSID) needs location permission. The app uses it for backup rules you set yourself, such as "only back up on my home Wi-Fi." The SSID stays on the device: it is never sent to your server or to us. This permission collects no GPS coordinates and tracks no location in the background.
You can deny or revoke any of these permissions at any time in your device settings. The feature that depends on it (map centering, photo geolocation, or Wi-Fi-restricted backup) then stops working.
This website
The marketing website at opennoodle.de usesUmami, an open-source analytics tool. Umami sets no cookies, does not track users across sites, and does not collect personal information. What it records is anonymous, aggregate page view statistics, and nothing else.
Demo instance
The public demo at demo.opennoodle.de also uses Umami for anonymous page view analytics. The demo is read-only: uploads and account creation are disabled, so there is no way to submit personal data.