Privacy Policy

What Little Archive Does

Little Archive is a web application that helps parents migrate their children's Seesaw school app photo exports into Google Photos. You upload a zip file exported from Seesaw, and Little Archive parses the photos, preserves the teacher's caption text as metadata, and uploads them to your Google Photos account.

What Data We Collect

Data You Provide

• Seesaw export files: You upload a zip archive containing photos, videos, and HTML files exported from the Seesaw app. These files may contain your child's name, teacher captions, and images of your child's schoolwork.
• Email address: We collect your email address when you enter it during the migration flow. This is used to send your completion confirmation. If you check the optional opt-in box at checkout, we will also send occasional seasonal emails tied to the school-year rhythm (typically end of school year, start of school year, and the holiday season) to remind you when it's a good time to archive the next journal. Opt-in is off by default, and you can unsubscribe at any time using the link in any email.
• Payment information: When you make a purchase, payment is processed by Stripe. We do not store your credit card number, bank account details, or other payment credentials. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Data We Access Through Google

When you authorize Little Archive to connect to your Google Photos account, we request the following OAuth scopes:

• photoslibrary.appendonly — This allows Little Archive to upload new photos and create new albums in your Google Photos library. This scope does not allow us to modify or delete any existing photos or albums in your Google Photos account.

We also receive your Google account email address and basic profile information (name) as part of the OAuth authentication flow. This is used solely to authenticate your session.

Data We Collect Automatically

• Basic analytics: We use Plausible, a privacy-focused analytics tool, to understand how visitors use the site — for example, how many users reach each step of the upload process. Plausible does not use cookies and does not collect personally identifiable information. We do not use Google Analytics. We do not build advertising profiles or sell analytics data.

How We Use Your Data

We use your data for the following purposes only:

• To provide the service: Parsing your Seesaw export, processing photos with caption metadata, and uploading them to your Google Photos account.
• To process payment: Passing necessary transaction details to Stripe.
• To send transaction emails: Sending you a confirmation email after your upload is complete.
• To send optional seasonal reminders: If you opt in at checkout, we send a small number of seasonal emails each year — typically aligned with the end of the school year, the start of the school year, and the holiday season — to remind you when it's a good time to archive the next journal. Opt-in is off by default, and you can unsubscribe at any time using the link in any email.
• To improve the service: Aggregated, non-personal analytics help us understand where users encounter issues in the upload process.

We do not use your Google user data for any purpose other than providing the Little Archive service. Specifically, we do not:

• Sell, rent, or share your Google user data with third parties
• Use your Google user data for advertising, marketing profiles, or audience targeting
• Use your Google user data to train machine learning models
• Allow any third party to access your Google user data
• Use your data for any purpose not explicitly described in this policy

How We Store and Retain Your Data

• Seesaw export files and processed photos are stored on our servers only for the duration of processing. Once your photos have been successfully uploaded to Google Photos, all uploaded files and processed data are deleted immediately from our servers.
• If an upload fails or is abandoned, temporarily stored files are deleted by an automated cleanup process — typically within 48 hours of the failure — with a maximum retention of 7 days enforced by a storage lifecycle policy.
• We do not retain copies of your photos, your child's images, or any content from your Seesaw export after the upload is complete.
• Email address: Your email address is stored in our database (Google Cloud Firestore) and with our email delivery provider, Resend. We retain it to send your completion confirmation, for customer support on your order, and — if you opted in — to send the seasonal reminder emails described above. Your email is also associated with your transaction record in Stripe. To have your email removed, contact us at privacy@littlearchive.app — we will delete it from our database and request removal from Resend on your behalf.
• Google OAuth tokens are encrypted at rest using Google Cloud KMS symmetric encryption and stored in our database (Google Cloud Firestore) for the duration of your migration job. Tokens are deleted immediately upon job completion, failure, or expiration. We do not retain tokens after processing is finished.
• Payment records: Stripe retains transaction records in accordance with their data retention policies. We store only a transaction reference ID and the associated email address for customer support purposes.
• Analytics data does not include personally identifiable information and is retained in aggregate form.

Data Sharing

We share data only with the following third-party services, and only as necessary to provide the service:

We do not sell your data. We do not share your data with advertisers. We do not provide data to data brokers.

Data Security

We protect your data using the following measures:

• All data in transit is encrypted using HTTPS/TLS
• Uploaded files are stored in isolated, temporary Google Cloud Storage buckets that are purged after processing, with a 7-day lifecycle backstop
• Google OAuth tokens are encrypted at rest using Google Cloud KMS symmetric envelope encryption
• Google OAuth authentication uses industry-standard OAuth 2.0 protocols
• Access to server infrastructure is restricted to authorized personnel only

Your Rights and Choices

• Revoke access: You can revoke Little Archive's access to your Google account at any time by visiting your Google Account permissions page. Once revoked, Little Archive can no longer upload photos to your account.
• Unsubscribe from emails: Every product update email includes an unsubscribe link. Click it to stop receiving updates. You will still receive transaction-related emails for any future purchases.
• Delete your email: To have your email address removed from our records entirely, contact us at the address below and we will delete it from Resend.
• Delete your data: Since we do not retain your photos or export files after processing, there is no stored photo data to delete. If you have questions about any residual data, contact us and we will confirm deletion.
• Opt out of analytics: You can use a browser extension such as an ad blocker to prevent analytics scripts from loading.

Children's Privacy

Little Archive is a general-audience service directed at adults — parents and legal guardians. We do not target the service at children, and we do not knowingly collect personal information directly from any child under 13. Photos of children processed by the service are uploaded by a parent or guardian acting on behalf of their own child, from an archive they have already exported from Seesaw.

We do not use Google Sign-In or any Google API Service to collect data associated with children's Google accounts. All authentication is performed by the parent or guardian.

If you believe a child has submitted personal information to Little Archive without a parent's involvement, contact us at privacy@littlearchive.app and we will delete the information.

California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of sale or sharing. We do not sell or share your personal information for cross-context behavioral advertising. To exercise any of these rights, contact us at privacy@littlearchive.app.

Google API Services User Data Policy

Little Archive's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Policy

If we make material changes to this privacy policy, we will update the “Last Updated” date at the top of this page and notify affected users before applying any new data practices.

Contact

If you have questions about this privacy policy or how your data is handled:

Email: privacy@littlearchive.app
Website: https://littlearchive.app