Reclaim

What we hold, and for how long

This describes what actually sits on our server while your photos are being moved, who can read it, and when it goes. You can check most of it against your own record, which lists every one of these events as it happens.

Version 2026-09-13.1. Last updated 13 September 2026.

Who runs this

Reclaim is run by Get Virtual View, a sole proprietorship in Massachusetts, United States. Questions about anything on this page, including a request to delete what we hold, go to support@reclaimphotos.com.

What we hold

Your photos and videos

Copies of the files you asked us to move, at full original quality, on our server, waiting for you to download them. This is the only part of your library that ever leaves iCloud, and it is a copy: your originals stay where they are until you tell us you have the files.

The job record

One file that holds your name, your email address, the Apple ID the job signed in with, the choices you made about what to move, and a line for each photo: its filename, when it was taken, how big it is, and the checksum taken when it was copied. Where your library recorded where a photo was taken, that coordinate is in the record too. The record contains no photo content. It also holds the history of the job, which you can read at any time from your own link. If you choose one final email summary, the record also holds the subject, time, ordinary job facts and any note our operator wrote for you from each routine confirmation we did not send separately. It does not store a second copy of your private link, archive passcode, Apple password, verification code, or photo filenames for that email summary.

The sign-in session

Your Apple password is used once to connect and is not written to the record or to any log. What is kept is the session Apple hands back, in a folder belonging only to your job, because the work runs after you close the tab. It is deleted as soon as the job's work is finished. If removing photos from iCloud or putting them back stops partway, we keep the session so you can finish without signing in again. We delete it 24 hours after that attempt. If a job is abandoned at any other point, the session stays until our copy of your photos is deleted or Apple expires it, and you can ask us to delete it sooner.

Who opened your link

Every time your link is opened we record the time, the address it was opened from, and the browser. Every time the operator opens your record, that is recorded too, by name. Both appear in the same history you can read, which is the point of keeping them: a record of who looked at your job is worth little if you cannot see it.

Where it is held

Photo files and active job records are held on server infrastructure in the United States. The hosting provider stores the data needed to run the service. Cloudflare, Amazon, and Microsoft also process limited data for these jobs:

Cloudflare handles encrypted traffic between your browser and our server, including downloads. Amazon receives your name and email address for messages, but it does not receive your photo files. When a place name is worked out from a coordinate, our server uses an offline list of towns. It does not send the coordinate to a mapping company.

No page here carries an analytics or advertising tracker. That covers the public home, Terms and Privacy pages, which also set no cookies, and your own job's page. Cloudflare's Web Analytics ran on these pages until 8 September 2026 and is now switched off. The private client page uses a required session cookie named reclaim_client. Cloudflare may use its own cookies to protect and deliver the site.

How long we keep it

State backups can contain an earlier version of a job record. Server-side backups and encrypted offsite record backups in Microsoft OneDrive are kept for no more than 30 days. Before the offsite copy is uploaded, Reclaim excludes Apple sessions, operator sign-in data, client-link credentials, archive passcodes, queued work, email content, and every photo, video, and archive file. The remaining work evidence is encrypted before it leaves the server, and Microsoft does not receive the encryption key.

The sweep that deletes our copy runs every five minutes. It refuses to run on a job where photos have been taken out of iCloud without a recorded confirmation, because in that state our copy could be the only copy, and it raises an alarm instead. The same five-minute retention pass removes the personal parts of older records as their 30-day and 365-day periods run out.

Who can read your copy

The operator can read your copy until it is deleted That is the honest answer and there is no version of this service where it is not true: the same server has to open your archive to check it. The passcode on your download stops someone opening the file if they come across it on a shared computer. It is not a lock against us, and it cannot be, because your files are re-read here before a single photo is taken out of iCloud. What we can offer instead of a promise is a record: every read of your job by the operator is written into the history you can see, with a name and a time.

We do not sell your information

We do not sell your photographs, your job record, or information about you. Reclaim has no advertising or data-sales business. The service is paid for by the job fee.

If there is a security incident

If we learn that someone acquired or used information from your job without permission, we will investigate and contain it. We will give you and government agencies every notice the law requires, as soon as practicable and without unreasonable delay. The content and timing of each notice will follow the law that applies and any lawful law-enforcement delay. We may send later updates as facts become clear.

The nightly check

Every night, every file we are holding for you is read again in full and its checksum compared against the one taken when it was copied. The result is written into your own record rather than into a log only we can see. You can read the result for each night the files were held. If a file ever failed that check, the photo it came from would stay in iCloud: the same check runs immediately before anything is removed, and nothing that fails it can be removed.

Nothing leaves iCloud until you say so

A photo can only be taken out of iCloud when your invitation allows removal, its copy has been verified against the original, and you have confirmed the files are on your own computer. All three conditions are enforced by the software. Photos that are removed sit in Recently Deleted on Apple's side for thirty days, and we can put them back while that window lasts.

Asking us to delete something, or to see it

Email support@reclaimphotos.com from the address your invitation was sent to and say what you want deleted: our copy of your photos, the sign-in session, the job record, or all of it. You do not need a reason. If you want a copy of what we hold about you, ask for that instead and we will send the record.

Changes to this page

If this notice changes, the date and version at the top change too. When you agree on the client page, your job record stores the version, the time, and that the agreement came from your invitation link. That recorded version applies to your job. Ask us for a copy and we will send it.

The law and this notice

This privacy notice is part of the Reclaim terms. The terms use Massachusetts law, but privacy and consumer rights that apply where you live still apply.