On your homepage you state that your images are secure as even the administrators do not have access to these images
But yet, your robots.txt file is ridiculous, you should block robots from crawling your /db/ directory.. (which is a 1 minute change)
You then should integrate work groups in vvcaps, for example if you *choose* to be apart of a workgroup (should be able to be disabled) you will need the workgroup name and workgroup password (a simple login form), and then when someone requests an image that was taken while signed into a workgroup is attempted to be viewed by someone without a cookie for that workgroup then they will get denied access to that image (which would require a software update.. which is fine, but it shouldn't take longer than 2 hours to implement this form of security)
Then, this software could break into corporate use, not just for video gaming and 11 yr olds.. I love VVCap and I see it's potential..
Thanks!