Privacy Policy

Last updated November 6, 2026 · Applies to dlacks.com and the services of Dlacks, LLC

1. Who we are
2. What we collect
3. Faces and tagging
4. How we use it
5. Who can see your content
6. Party Pools and guests
7. Who we share it with
8. Cookies and recordings
9. Payments
10. How long we keep it
11. Security
12. Your choices and rights
13. Children
14. Changes
15. Contact us

1. Who we are

Dlacks, LLC ("Dlacks", "we", "us") converts videotapes, film, photos and slides into digital files and hosts them on dlacks.com so families can watch, share and talk about them. We're based in the Baltimore, Maryland area. This policy explains what personal information we collect, why, and the choices you have. Our Terms of Service also apply.

2. What we collect

Information you give us

• Account details: name, display name, email address (your login), password (stored only as a secure one-way hash), and, if you choose, birth year, gender and a profile picture.
• Order and contact details: phone number, pickup address, how you like to be contacted, the items you send us, and notes on your order. If you choose a mail-in kit (when we offer them), also the address we mail it to and the tracking numbers of the packages going each way.
• Your media: the tapes, film, photos and slides you send us, and the digital copies we make. Some of these show you, your family and other people.
• What you add to the site: events you create, photos and videos you upload or contribute, captions, comments, reactions (such as 👍 or ❤️), people you @mention or tag, and invitations you send (including the name and email of the person you invite).
• Party Pools you host: the party's name, times, the events on it, and your choices for guests. See Party Pools and guests.
• Messages: anything you send through the contact form or the "Report a problem" button.
• Two-step sign-in: if you turn it on, a secret key for your authenticator app and one-time backup codes (stored hashed).

Information collected when you use the site

• Activity: sign-ins and failed sign-in attempts, pages and events you view, where you stopped in a video (so you can resume), and actions such as sharing or uploading.
• Device information: IP address, browser type and the date and time of each visit.
• Session recordings, only when switched on: see Cookies and recordings.

Information from others

• A member may invite you, tag your face in their event, or share an event with you. We then hold your name or email, or a picture of your face, because of what they added.
• Square tells us whether a payment succeeded, the amount, and the last four digits and type of card used.

3. Faces and tagging

To help families invite the people who appear in their events, the site can find faces in an event's videos and photos.

• Face finding runs in the web browser of the event's owner or our staff. It compares faces only to group pictures of the same person within that event.
• We save a cropped picture of each face, like a thumbnail. We do not store face measurements (sometimes called face geometry or biometric templates). They're discarded as soon as the page is closed.
• A face picture is linked to a person or account only when someone tags it. Face pictures are used only to tag, invite and show who appears in an event. They're never sold or used to identify people anywhere else.
• You can ask us to remove a face picture of you or a tag of you at any time (see Contact us). We do so within 30 days, and face pictures of an event are deleted when the event is deleted.

4. How we use your information

We don't sell your personal information, "share" it for cross-context behavioral advertising, or use it to train artificial-intelligence models. We don't make decisions about you that have legal or similar effects by automated means alone.

5. Who can see your content

• Events are private by default. An event is visible only to its owner, the people it has been shared with, and our staff.
• Owners decide who's invited. The owner of an event (usually whoever ordered the transfer or created it) can invite people, share it, and choose whether shared events need their approval first.
• Contributions follow the event's rules. Photos and videos you contribute to someone else's event, and your comments, can be seen by everyone who can see that event. The owner may review or remove them.
• Reactions and @mentions. Your reactions, and your name beside them, can be seen by the people who can see that video, photo or comment. When you type @ in a comment, the site suggests only people who can already see that event. A person you mention gets an email with the comment, unless they've turned those emails off under My account.
• Sample events that every member receives have no comments, and nobody but staff sees who watched them or who reacted, so members of different families stay private from each other.
• Owners can see who has watched. On an event's Audience tab, its owner can see which members have viewed it.
• Your profile: your display name and profile picture appear beside your comments and in sharing lists, where other members see only part of your email address.
• Our staff (Admins and Power Users) can see all content to transfer it, support you and keep the site safe. They're bound to keep it confidential.
• Team members who help us run the business get only what their job needs. For example, Customer Service sees orders, contact details and messages; a bookkeeper sees payments and credits; someone watching site statistics sees totals, not people. They don't see your videos, photos or comments, and they're bound to keep what they see confidential.

6. Party Pools and guests

A member can make a Party Pool: printed cards with a QR code that let guests at a gathering watch chosen events for a few hours (8 at most), without an account.

• Guests are anonymous. We set a cookie with a random number so we can count visits and remember a PIN the host set. It lasts two days. We don't ask guests who they are.
• Guest photos. If the host allows it, guests can add photos they took. A guest may add a name to show with them. We remove location and camera details from every photo, and keep the guest's IP address only to stop one person adding too many. Unless the host chose otherwise, the host looks at each photo before other guests or the party TV see it.
• The host decides what's kept. The host can hide or delete any guest photo, and can copy photos into their own events, where they're credited to the guest's name (if given) and follow that event's privacy rules. Everything else, with the guest's name and IP address, is deleted 60 days after the party ends.
• Photos of other people. Guests should add only photos they took and of people happy to be in them. Party photos often show children: a parent or guardian, or anyone shown, can ask the host or us to remove a photo, and we will.
• Asking to join. If the host allows it, a guest can leave their name, email and a note asking to be invited. That goes only to the host, to send an invitation.

7. Who we share it with

We share personal information only with:

• Service providers who work for us under contract and only as we instruct: web hosting, email delivery, Square (payments), RingCentral (phone calls and text messages), shipping carriers such as USPS, UPS or FedEx (only for mail-in kits, and only the name and address on the package) and, while switched on, Hotjar and Inspectlet (session recordings).
• People you choose: when you invite, share or contribute, the people you choose see what you share.
• Legal and safety reasons: when the law requires it, or to protect the rights, property or safety of our members, the public or us.
• A business transfer: if Dlacks is sold or merged, your information would move with it under this policy, and we would tell you first.

Text messages

If you tick the box to get order updates by text, we text the number you gave about that order: pickup times, progress, and the link to pay. Message frequency varies. Message and data rates may apply. Reply STOP to stop, HELP for help. Agreeing to texts isn't required to order.

We don't sell, rent or share your phone number or text consent with anyone for their marketing. Your number and texts go only to RingCentral, which sends them for us. We keep a record of when you agreed, the texts we sent and received, and any STOP request.

8. Cookies, local storage and session recordings

• Essential cookies: a sign-in cookie keeps you logged in. If you choose "remember this device" for two-step sign-in, a cookie remembers it for a limited time. The site can't work without these.
• Local storage: your browser remembers things like the quantities on the order page and small display preferences. They stay on your device.
• The home-screen app: if you add Dlacks to your phone's home screen, it keeps a copy of the site's look (styles, scripts, icons) and an offline page on your device. Your videos, photos and pages are never stored there; they always come from our server, which checks who is asking.
• Party Pool guests: a two-day cookie with a random number counts visits and remembers the PIN. See Party Pools and guests.
• Session recordings (Hotjar and Inspectlet): while we're testing the site we may switch these tools on. They record how pages are used (clicks, scrolling, page visits) so we can fix problems, and what's on screen can appear in a recording. Password fields are hidden by the tools. They're off unless we switch them on, and testers are told when they are. Those companies' privacy policies also apply.
• We don't use advertising cookies, and we don't sell or share data for advertising.
• We treat a browser's Global Privacy Control signal as a request to opt out of any sale or sharing. We don't sell or share in any case.

9. Payments

You pay after we've transferred your media and set the final charge. Payment happens on Square's secure page. Square processes your card under its own privacy policy and security standards (PCI DSS). We never receive or store your full card number or security code. We keep the payment amount, status, date, card type and last four digits for our records and refunds.

10. How long we keep information

• Your account and content: for as long as your account is open, or until you ask us to delete them.
• Guest access: ends when the invitation expires. Content a guest added stays with the event unless they ask us to remove it.
• Party guest photos: deleted, with the guest's name and IP address, 60 days after the party ends, unless the host copied them into an event. Anonymous visit counts stay with the Party Pool until the host deletes it.
• Mail-in kit addresses and tracking numbers: kept with the order, like other order records.
• Original media: we return your physical tapes, film and photos with your order. We keep working copies only as long as needed to finish and support the order.
• Orders and payments: as long as tax and accounting law requires (generally up to 7 years).
• Activity logs: about 12 months. Older entries are archived or deleted.
• Messages and problem reports: as long as needed to help you, then deleted or archived.

11. Security

We protect your information with encrypted connections (HTTPS), hashed passwords, optional two-step sign-in (required for staff), limits on sign-in attempts, and access checks on every private video and photo. We give staff only the access they need. No system is perfectly secure. If a breach affects your personal information, we'll tell you and the authorities as the law requires.

12. Your choices and rights

You can update most of your information yourself under My account. You can also ask us to:

• See the personal information we hold about you, and get a copy in a portable format;
• Correct anything that's wrong;
• Delete your account, your content, or a tag or face picture of you;
• Stop any use you have consented to, such as session recordings, or non-essential emails.

Depending on where you live (for example Maryland, Virginia, California and other US states with privacy laws, or the European Economic Area and the UK), you may have these rights by law, plus the right to appeal our decision and to complain to a regulator. We honour these requests for everyone, wherever they live. We'll answer within 45 days, may ask you to confirm who you are, and won't treat you differently for using your rights.

Some things we may need to keep: records the law requires, and content that is part of someone else's event. Deleting your account removes your login and profile. Comments and contributions you made to other people's events are removed or anonymised at your request.

13. Children

Family videos often show children, and owners decide who can see them. Accounts are for people 13 and older. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, contact us and we'll delete it. A parent or guardian can ask us to remove tags, face pictures or party photos of their child. Party guests aren't asked their age; a guest photo is the host's responsibility once they keep it.

14. Changes to this policy

We'll update this page when our practices change and change the date at the top. For important changes we'll tell members by email or on the site before they take effect.

15. Contact us

Questions or requests about your privacy: use our contact form and choose "Anything Else", or reply to any email we've sent you. Please say "Privacy request" and what you'd like us to do.

Dlacks, LLC · Baltimore, Maryland, USA