Trust

Code signing policy

The installers are not signed with a certificate yet: Windows shows a SmartScreen warning on the first launch, macOS builds carry an ad-hoc signature only, and the Linux AppImage and .deb are unsigned too. Every release lists SHA-256 checksums in SHA256SUMS.txt, so you can check that a download is the one published here. The APT repository at fotollection.org/apt is signed with the project's GPG key, so apt checks every package it installs from it.^1,2,3

Team roles

Every installer is built by GitHub Actions from the public repository, from a tagged release; nothing built on a personal computer is published. The build workflow is release.yml

Committers and reviewers

@hoangphi01 · Writes and reviews every change to the source code.

Release approver

@hoangphi01 · Checks and publishes every release by hand.

Privacy policy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it.

Works offline

Photos, folders, projects and settings never leave your computer. There is no account, no telemetry and no crash upload.

Check for updates

The only network request: when you click, and from v0.13.0 once at start unless turned off in Settings, it asks GitHub (api.github.com) for this project's latest release. Nothing is downloaded by itself. GitHub's privacy statement applies to it.

No location in exports

GPS coordinates are removed from exported photos by default.⁴

This website

The website, not the app, counts visits and clicks on its download links with Google Analytics; Google's privacy policy applies to it. The download count comes from GitHub.

Changes to your system

Installing adds only what the app needs, and uninstalling removes it.

Open with

The installer, and on Linux the .deb, adds Fotollection to the Open with menu for photo files. It never makes itself the default app.

Uninstall

Remove it from Windows Settings, or delete the app on macOS. The Windows uninstaller also removes the Open with entries. On Linux, run sudo apt remove fotollection, or delete the AppImage, or run the install script with --uninstall, which also removes the APT repository and its key. Settings and projects stay in your home folder.

1. A .deb is a Debian package, the installer format of Debian, Ubuntu, Linux Mint and their relatives; APT (Advanced Package Tool) installs and updates such packages from a repository. An AppImage is a single file holding an application and what it needs, which runs on most distributions without being installed.
2. SHA-256 is a cryptographic hash function of the SHA-2 family, standardised by the US NIST in FIPS 180-4. It turns a file into a 64-character fingerprint; change a single bit of the file and the fingerprint changes.
3. GPG (GNU Privacy Guard) is a free implementation of the OpenPGP standard. The APT repository is signed with a GPG key, so your system can check that every package comes from it unchanged.
4. GPS (Global Positioning System) is the United States' satellite navigation system. Phones and many cameras use it, often with Galileo, GLONASS or BeiDou, to record where a photo was taken.

The photo services at dm and Rossmann are made by CEWE, a trademark of CEWE Stiftung & Co. KGaA. Print sizes were checked against dm's price list in October 2026; the shops may change them.

The Prague photos in the screenshots (the trams, the streets, the Vltava) were taken by @hoangphi01 on a Lumix GX9 in November 2026: © @hoangphi01, all rights reserved. They are not covered by the app's licence and may not be reused. The other demo photos are in the public domain (CC0) on Wikimedia Commons, by Dktue (7 photos), Pierre Blaché from Paris, France (2) and Kate Branch (1). The cat in the print-basket and best-shot screenshots was also photographed by @hoangphi01 on the GX9, all rights reserved; the softer, shaken and darker copies beside it were made from that one photo, to show how the best shot is chosen. Every file, its page and its checksum.

The RAW measurements use nine samples in the public domain (CC0) from raw.pixls.us, one per format; scripts/fetch-raw-samples.py downloads and checks them.

RAW formats named on this site belong to the camera makers that define them: RW2 (Panasonic Holdings Corporation), CR2 and CR3 (Canon Inc.), NEF (Nikon Corporation), ARW (Sony Group Corporation), RAF (FUJIFILM Corporation) and ORF (OM Digital Solutions Corporation, formerly Olympus). DNG is an open specification published by Adobe Inc. Fotollection reads them through a reader built into Fotollection, and on macOS through the system's codecs first (on Windows, Microsoft's Raw Image Extension is a last fallback when installed); it is not made or endorsed by any of these companies.

Camera names and logos in the screenshots and in the app's info frame are trademarks of their owners, used only to show which camera took a photo: Apple (Apple Inc.), Canon (Canon Inc.), Fujifilm (FUJIFILM Corporation), Hasselblad (Victor Hasselblad AB), Leica (Leica Camera AG), Lumix (Panasonic Holdings Corporation), Nikon (Nikon Corporation), Noritsu (Noritsu Koki Co., Ltd.), Phase One (Phase One A/S), Ricoh (Ricoh Company, Ltd.), Samsung (Samsung Electronics Co., Ltd.) and Sony (Sony Group Corporation).

Apple and macOS are trademarks of Apple Inc.; Windows of Microsoft Corporation; Linux is the registered trademark of Linus Torvalds in the U.S. and other countries; Ubuntu of Canonical Ltd.; Debian of Software in the Public Interest, Inc.; Fedora, Red Hat, RHEL and CentOS of Red Hat, Inc.; openSUSE of SUSE LLC; Pop!_OS of System76, Inc.; Rocky Linux of the Rocky Enterprise Software Foundation; AlmaLinux of the AlmaLinux OS Foundation; ChromeOS of Google LLC; NVIDIA of NVIDIA Corporation; the names of the other Linux distributions belong to their projects; Facebook and Instagram of Meta Platforms, Inc.; GitHub of GitHub, Inc.; Google Analytics of Google LLC; Lightroom of Adobe Inc.; IrfanView of Irfan Škiljan; VietQR of NAPAS; Wikimedia Commons of the Wikimedia Foundation. The Apple, Windows and Linux (Tux, first drawn by Larry Ewing) marks are drawn from Simple Icons (CC0) and only show which system a column or a step is about.

Fotollection is an independent open-source project. It is not affiliated with, sponsored or endorsed by any of these companies, and every other trademark belongs to its owner.

The Fotollection name and logo identify the official app, made by @hoangphi01. Official downloads come only from fotollection.org and the project's GitHub releases. The GPL-3.0 licence lets anyone share or sell copies, changed or not, as long as they keep this licence and offer the source code; a changed or resold copy must not use the Fotollection name or logo in a way that suggests it is the official app.

Sharing or selling Fotollection, or building on it? Please tell the author first by opening an issue on GitHub (github.com/hoangphi01/fotollection/issues). The app is free and made in spare time; a short note is the fair way to say thanks.

Quoting, reviewing or showing the app, or using these screenshots? Please credit Fotollection and link to fotollection.org.