Security

Your images stay yours. Here is exactly what we hold.

What we store, where it lives, who can open it, and for how long. In plain words.

Stabble never holds your RAW files.

Your originals never leave your Mac. What we store is a web-sized JPEG preview of each image, plus what your client does with them — ratings, color tags and comments. Nothing else.

Never on our servers

  • RAW files and original captures
  • Capture One sessions and settings
  • High-resolution exports
  • Card or bank details — payments live at Paddle

What we do store

  • A web-sized JPEG preview of each image
  • Your client's work: ratings, color tags, comments, drawings
  • Reviewer emails and the gallery access log
  • Your account, team and studio logo

Where it all lives

Hosting
Frankfurt, EU
Traffic
Encrypted — HTTPS
Studios
Strictly walled off

Servers and preview storage both run in Frankfurt, Germany. We never transfer your data outside the European Union, and an account can only ever reach its own galleries, images and clients.

Who can open a client gallery

Three things guard a gallery — and you hold all three.

1
A private link
Never listed anywhere, never indexed by search engines.
2
An access code you choose
Regenerate it any time — the old one stops working instantly.
3
The reviewer's email
Every unlock is logged — email, date, IP address — and you see the full list in your console.

Every piece of data has its own safety net

WhatHow it is protectedHow often
Your client's selection Automatic restore points: one when your client sends their selection, one before every republish. Roll back in one click from your console. At every key moment
Accounts, galleries, settings Backed up with the whole server every 12 hours; backups are kept for one week at our hosting provider. Twice a day
Your studio logo Copied onto that same server, so the server backups cover it too. Daily
Image previews Rebuildable at will: the session on your Mac is the master copy. Republishing puts a gallery back online as it was. On demand

The one thing nobody could rebuild — your client's choices — is also the one thing with its own dedicated history.

How long we keep things

The clock starts the day a gallery is published.

PlanGallery retention
Solo 90 days
Studio 180 days
Production 365 days

Archiving frees a slot without shortening anything: previews stay until the retention date, and one click brings the gallery back. Past that date they are deleted for good — archiving never extends the clock.

Deleting your data

  • Deleting a gallery removes its images and previews immediately — no waiting for the retention date.
  • Deleting your account removes your studio, its galleries and every stored preview.
  • Ratings, comments and access records go with the gallery they belong to.

Who else processes your data

We work with a small number of providers. Each one only receives what it needs to do its job:

ProviderWhat forWhere
DigitalOceanHosting and preview storageFrankfurt, EU
CloudflareDNS and protection against attacksGlobal network
Elastic EmailTransactional emails (gallery invitations, account)EU / United States
PaddlePayments — Merchant of Record, handles VAT and invoicingEU / United Kingdom

We use no advertising trackers and no third-party analytics.

Your rights (GDPR)

For the data of your own studio and users, the data controller is:

Sokkel
47 rue Vivienne, 75002 Paris, France
[email protected]

You may request access, correction, deletion or a portable copy of your data by writing to that address. We answer within one month.

When you publish a gallery for a client, you remain responsible for the images and the reviewer contact details you enter — Stabble processes them on your behalf, for the duration you set.

Reporting a security issue

Found something that looks wrong? Write to [email protected]. We read every report and answer, including the ones that turn out to be false alarms.

This page describes how the service works today and is kept in step with it. It is not a contract: the binding terms are in the Terms of Service and the Privacy Policy. Terms · Privacy