Location is optional and collected only when you choose it on the image password screen. The administrator, Photo owner, can see the view timestamp and any shared coordinates and accuracy. No continuous location tracking runs.
Records are kept for 30 days when scheduled cleanup runs. Browser sessions identify repeated visits; they do not identify a real person. This application does not store your raw IP or browser details in view records. Your hosting provider may keep separate server logs.
The browser selects its location source. GPS-only positioning cannot be guaranteed. Permission refusal does not block the image.
This works while your session cookie is available. After cookies expire or are cleared, ask the photo owner to remove records. Backups and host logs have separate retention rules.