School Photo Store · the family storefront for picture day
One true package price before any add-on screen — no pre-selected package, no guessable proof link.
School Photo Store is where a family opens their child’s proofs and decides what to order: package contents, sizes, and add-ons shown together on one screen, priced as a single true total before checkout — not a headline price that grows once you commit. A proof gallery is reached with a per-family access credential resolved by a roster lookup, never a sequential code another family could guess.
This page describes the family storefront leg of the same school photography program described at schoolphoto.software. There is no live checkout on this page today: no card is charged, and no "buy now" or "add to cart" button is live.
What a family storefront usually gets wrong, and what this one does instead
These are named as generic, common failure modes of a photo-ordering storefront — not a claim about any specific vendor, and no vendor is named on this page. Each is paired with the honest build status of the alternative below.
A price that grows after you commit
A common photo-storefront pattern shows one headline package price, then reveals per-item add-ons — retouching, a second background, a keychain, a magnet — only once checkout has started. The number a family compared against is not the number they pay. Here, the base package and every listed add-on show their price on the same screen, before any checkout step begins.
A pre-selected package that has to be declined
Some storefronts pre-select a "recommended" package at checkout, priced above what most families actually want, and a family has to actively remove it rather than actively choose it. This storefront starts every order with nothing pre-selected.
A proof link nobody can trust
A bare sequential access code is guessable, and one that expires before an order deadline gives a family no visible reason why. A proof gallery here is reached through a per-family access credential resolved by a roster lookup against the student record — not a number that counts up from another family's.
A paper envelope that is easy to lose
A printed order envelope sent home in a backpack, priced on paper, is easy to lose before the deadline, and the deadline itself is rarely restated anywhere online. The catalog and pricing here live at a URL a family can reopen any time before ordering closes.
No answer to "where does the photo go if I don't order"
A family who does not see a plain answer to that question tends to assume the worst one. The answer here is stated directly in the privacy section below: a proof that is never ordered is never made public, never sold, and is retained only under the same consent and retention terms as any other roster record.
The storefront modules: what is built and what is early access
The family storefront runs as a chain of modules, each keyed off the roster. The first five are shipped and running. Live payment, digital-download delivery, and post-window reorder are early access. Each is marked honestly.
Package and product catalog — one true total
Package contents, sizes, and add-ons are structured data, not a scanned price sheet: every add-on a family can select is listed with its price on the same screen as the base package, so the number shown before checkout is the number a completed order would total. Nothing appears for the first time deep inside a checkout flow. Shipped
Roster-matched, consent-gated proof galleries
A family sees only their own consented child's proofs. The proof is assigned to a roster record explicitly at capture, and a family reaches it through a per-family access credential resolved by that roster lookup — never a public gallery, never a browsable roster, never a sequential guessable code. Shipped
School-choosable backgrounds — deterministic matting
A school or studio selects the portrait background from a catalog: solid tones, school-color-derived options, and thematic choices, composited onto a transparent-alpha cutout by a deterministic matting step. What a family sees in the proof is what a reorder reproduces — the same portrait and the same background always produce the same result. Shipped
A code-enforced cost floor
Every package, print, and add-on is priced above a cost floor that lives in code — a discount can never drop a price below what the item actually costs to produce. The floor is enforced on the server, not typed in by a browser. Shipped
Order ledger — what was selected, tracked against the roster
The order ledger records what a family selected against the roster record, and its current status. It is what carries a completed order forward to the print-and-fulfillment leg at schoolphoto.press. Shipped
Live payment — early access
Catalog, pricing, package comparison, and the order ledger are built and running. The live payment step that would charge a family for a completed order is honest-off. No card is charged today; there is no "buy now" or "add to cart" anywhere on this page. Early access -- live payment rails
Digital-download delivery and post-window reorder — in active development
A standalone digital-download product, distinct from a printed package, is in active development. A family-facing reorder flow for after the original ordering window closes is also in active development. Early access -- in active development
How a family reaches a proof and places an order
The storefront picks up after picture day, and every step resolves back to the same roster record a family’s own consent already gates.
- A family receives a per-family access credential. It is issued by the school or studio and resolved to the family’s own claimed children by a roster lookup — not a sequential code, not a link that also opens another family’s proofs.
- Proofs load for the family’s own consented child only. A student without a completed consent record has no proof surfaced here at all — the check runs before a proof is ever shown, not after an order is placed.
- The catalog shows one true total. Package contents, sizes, and every add-on price appear on the same screen, with nothing pre-selected and nothing revealed for the first time later in the flow.
- A selection is recorded to the order ledger. What the family chose is saved against the roster record. Live payment is early access: no card is charged today, and there is no live checkout on this page.
- The order moves to fulfillment. A completed selection becomes the input to the print-and-fulfillment leg described at schoolphoto.press, where the honest print-lab disclosure explains what happens next.
Photo privacy: a roster lookup, not a face match, and never a public gallery
Matching a proof to a family is a roster LOOKUP, not a face match. The studio assigns each proof to a roster record explicitly at capture, and a family’s access credential is the key that resolves to their own claimed children — nothing else. Facial recognition is off by default: it plays no part in that matching workflow, and it is a capability we are building that is not turned on today.
There is no public gallery, no browsable roster, and no search of student photos anywhere on this storefront. A minor’s photo is never made public, never indexed by a search engine, and never sold. A proof that is never ordered stays exactly that — unordered — and is retained only under the same consent and retention terms as any other roster record.
Consent is collected per student, tracked per roster record, off by default, and withdrawable at any time. A withdrawal removes the student’s proofs from this storefront going forward.
How the pricing works, honestly
Every package, print, and add-on is priced above a code-enforced cost floor — a discount can never drop a price below what the item actually costs to produce. Above that floor, the photographer or studio keeps the larger leg of a completed order, and a proof is never sold to anyone other than the consented family it belongs to.
Pricing is honest-off in one specific way: the catalog, the package comparison, and the order ledger are built and running, but the live payment step that would charge a family is early access. No card is charged today, and there is no live checkout, "buy now," or "add to cart" anywhere on this page.
Common questions
What is School Photo Store?
It is the family storefront for a school photography program: the package catalog, the pricing, and the proof gallery a family reaches to decide what to order. It is scoped to that storefront, not the whole toolchain, not print fulfillment, and not the studio marketplace.
How is this different from schoolphoto.software?
schoolphoto.software is the whole toolchain a school runs its program on, from roster import through order rails to the pro-lab export, told to the school buyer deciding whether to adopt the platform. School Photo Store is the storefront leg of that toolchain, told to the family who actually opens it to order.
How is this different from schoolphoto.press?
schoolphoto.press is the print-and-fulfillment leg: what happens to an order after it is placed, on the way to a print lab. School Photo Store is the shop window before that step -- the catalog, the pricing, and the selection.
Can another family see my child's proofs?
No. A proof is assigned to a roster record explicitly at capture, and a family's access credential resolves only to their own claimed children through that roster lookup. There is no public gallery and no browsable roster.
Does this use facial recognition to find my child's photo?
No. Matching a proof to a family is a roster lookup, not a face match. Facial recognition is a capability we are building and is not turned on today.
Will I see the full price before I check out?
Yes -- the base package and every add-on price are shown together on the same screen, before any checkout step begins. Nothing is revealed for the first time later in the flow, and no package is pre-selected for you.
Can I order and pay today?
Not for live payment. The catalog, package comparison, and order ledger are built and running. The live payment step that would charge a card is early access: no card is charged today, and there is no live checkout, "buy now," or "add to cart" on this page.
What happens to my child's photo if I don't order?
It stays unordered. It is never made public, never indexed by a search engine, and never sold. It is retained only under the same consent and retention terms as any other roster record, and a consent withdrawal removes it from this storefront going forward.
Can I buy a digital download instead of prints?
A standalone digital-download product, distinct from a printed package, is in active development. It is not live today.
The ordering window closed -- can I still order?
A family-facing reorder flow for after the original ordering window closes is in active development. It is not live today; get in touch to talk through what is available for a specific case.
Related surfaces
The same school photography program is framed several ways across the family of sites. These destinations cover the toolchain, print fulfillment, the app, the studio network, and picture day itself.
schoolphoto.software
The whole toolchain this storefront is the family-facing face of: roster import, the consent gate, roster-matched galleries, order rails, and the pro-lab export.
schoolphoto.press
The print-and-fulfillment leg an order placed here becomes: prints, packages, and ID cards made to order and routed to a print lab.
schoolphoto.app
The mobile / family-ordering app framing of the same catalog and order flow described here.
schoolphoto.network
The two-sided studio network where independent photographers and the schools they serve meet, before a family ever sees a proof.
pictureday.software
The picture-day event orchestration surface: check-in, day-of consent, and the shoot itself, which produces the proofs this storefront sells.
What is built and what is honest-off
The package and product catalog, roster-matched consent-gated proof galleries, school-choosable backgrounds with deterministic matting, a code-enforced cost floor, and the order ledger are built and running today. The live payment rail is honest-off: no card is charged today, and there is no "buy now" or "add to cart" anywhere on this page. Digital-download delivery and a post-window reorder flow are early access — we name them plainly. Matching a proof to a family is a roster lookup, not a face match; facial recognition is a capability we are building and is not turned on today. There is no public gallery and no browsable roster. A minor’s photo is never made public, never indexed, and never sold. No competitor or vendor brand names appear here.