By Matthew McDyer. Last updated 14 September 2026.
Your photos are stored on Amazon Web Services infrastructure in the UK/EU region (eu-west-2, London). Only you and anyone you share a gallery's private link with can view it; a password you set adds a second check before the gallery loads.
A gallery is only reachable with its exact private link, which includes an unguessable access token. If you've also set a password, that's checked before any photo is shown. Larkspur staff don't browse client galleries; access to the underlying storage is limited to the systems that need it to serve your account.
Deleting a gallery from your dashboard hides it from your list and disables the client link immediately. The underlying files aren't erased at that instant: they're kept for a short grace period in case of a mistake, then permanently deleted by an automated process. Once that grace period passes, the files are gone.
A nightly automated job measures the real size of everything stored in your account, directly from storage, not from a running total that could drift out of sync. That figure is what drives both your dashboard's usage display and your monthly bill.
Card payments are handled by Stripe. Larkspur doesn't store your card details directly; Stripe processes the setup fee and the monthly storage charge and shares only what's needed to keep your account's billing status accurate.
This first version doesn't yet have a self-serve full account deletion flow. If you want your account and all associated galleries permanently removed, contact [email protected] and it will be handled directly.
This page is a plain-language summary, not the legal text itself. Formal Terms of Service and a Privacy Policy are in progress and will be linked here once published; until then, treat this page as the operating description of how your data is actually handled.