Last updated 20 October 2026

Privacy in Shutdesk.

Shutdesk is developed by Christoffer Andersen. Privacy questions can be sent to cafoto@mac.com.

Photos and settings on the device

Photos, captions, metadata, editing choices and settings are stored locally in the app on the iPhone. FTP passwords are stored in the Apple Keychain. The app does not require a separate Shutdesk account and contains no advertising or tracking tools.

Match information

When the app fetches match data, it connects to desk.cftp.no to download public match information. As with other web requests, the server receives the IP address and technical details about the request. The web host stores technical access logs with the IP address, time and requested page, which can show which match data has been fetched. The logs are used for operations, troubleshooting and security. They are not used for advertising or for tracking across apps and websites. Your photos are not sent to the match service when match data is fetched.

Export and FTP

When you choose to export, the photo and its metadata are sent to Photos on the device or to the FTP recipient you have chosen yourself. Metadata may include names, location, caption and other information you have entered. The recipient handles the transferred files according to its own procedures. FTP traffic is unencrypted. Use networks and recipients you trust.

Dropbox

Shutdesk can optionally be connected to your own Dropbox account under More → Connections. This only happens if you choose to connect. Sign-in takes place via Dropbox (OAuth), and the access tokens are stored only locally in the Apple Keychain on the iPhone. Photos are only uploaded to the app's own folder in your Dropbox, and only when you send them yourself or have set up an automatic step. The app reads only the account name and email address to show which account is connected. No data passes through Shutdesk's servers. You can disconnect at any time in the app, and you can revoke access in your Dropbox settings.

Mini Desk and client links

Mini Desk is optional. When you create a client link or send photos to it, the assignment title, JobID, photos, file names and metadata are transferred over HTTPS to cftp.no. Metadata may include the photographer's name, caption, names of people, location and other information you have added to the photo. The content is stored on the web hosting service that runs the service at Domene AS, so that recipients can view, search and download the delivery.

The client link contains a secret access key. Anyone who receives the full link can view and download the photos until it expires, including if the recipient shares the link further. The upload key is stored in the Apple Keychain on the phone. The server stores hash values of the access keys, a hashed installation identifier and a hash of the IP address for access control and abuse limitation. Ordinary technical server logs may also contain the IP address and time.

New client links include one day from creation. The current expiry is shown in the app and on the client page. On expiry, access is closed, and the server's photos and thumbnails are deleted during cleanup. Technical room information, assignment title, identifiers, expiry time and any purchase references are retained after the photo cleanup to prevent expired links from being reopened or purchases from being registered more than once. Choose “Delete client link” in the app to close the room permanently and delete the server's photos, thumbnails, assignment title and JobID before expiry. Technical identifiers and any purchase references are retained to prevent reopening and duplicate registration. Deleting the app itself does not delete the room on the server. Contact cafoto@mac.com if you need earlier deletion or help with stored information. Copies that clients have already downloaded must be handled by the client.

Apple and subscriptions

Apple handles payment and subscriptions. Shutdesk verifies purchase information signed by Apple to determine whether export is available. When extra time is purchased for Mini Desk, the transaction ID and room association are sent to cftp.no. The server retrieves the transaction from Apple and verifies the product, purchase environment and which room the purchase applies to. The product ID, transaction reference and time of registration are stored together with the room. The app does not receive card details. Apple's services are governed by Apple's privacy policy. Photos and backups may be synced through Apple services if you have enabled this on the device.

Backup and sharing of settings

An exported settings file may contain the photographer's name, contact information, metadata profiles, and FTP addresses and usernames. It may also contain client links to Mini Desk. A client link gives read access to the photos until expiry; treat the backup as confidential. It does not contain FTP passwords, photos or subscriptions. You choose where the file is stored and who it is shared with.

Support

If you contact us, we use the information you send to respond to your inquiry and help you. Do not send passwords or unnecessary personal information. Contact us if you wish to request access to, correction of or deletion of information you have sent us.

Deletion

Deleting the app removes the app's local photo library. Exported photos and backups must be managed wherever you have stored them. Deleting the app does not cancel an Apple subscription; this must be managed in your Apple account. Keep the originals on the camera until you have checked backups and deliveries.