Encrypted albums
Encrypted albums are not readable (non-decipherable) by Pycter.
Keys
Each album has a 'key', equivalent to a 43 alphanumeric character password, that protects your content.
That key is generated randomly when the album is created, and never changes.
Pycter does not know the key, it is transmitted via the "anchor" part of the invitation link. Anchors are not sent to servers by browsers.
The invitation link has an expiration time. Decoding the key requires that the link is not expired.
Anatomy of an invitation link
What is encrypted
- The pixels of your photos and videos look like a broken television screen to anyone without the key.
- The geo-location of your memory is gibberish as well.
- Nicknames and album title look like someone stepped on a keyboard.
What is not encrypted
- The member list of your album. We need to know who to send the media to, as well as help you audit the security of your group.
- The number of media in your album, as well as file sizes. That is to keep your album within its limits.
- Media identity. If you share the same photo in 2 different groups, we know you share the same photo. That is to allow us to optimize storage.
- Capture time of photos. That is because you will be able to scroll very long albums on the web, chronologically. We order the photos on the server.