Privacy notice

The photos you take, the name you enter (if any), and a random camera ID stored in your browser so your shot count survives a reload. Guests don't create accounts, and an email address is only needed if you ask us to send you the photos.

Before a photo is stored we remove its hidden metadata, including GPS location and device details. We keep a one-way fingerprint of your network address for a short time to stop people creating endless cameras. It can't be turned back into your address.

If you choose to leave an email address, we use it only to send you one email with a private link when the event's photos are ready. The event organiser can see the address. Every email has an unsubscribe link, and the address is deleted with the event.

Your email address, password (stored hashed by our authentication provider), your name if you give it, and the events you create.

The organiser can see every photo taken at their event. Other guests see photos only when the organiser opens the gallery, and only photos the organiser has allowed. Photos are kept in private storage and are shared through links that expire after an hour.

Photos and guest records stay until the organiser deletes them or deletes the event. Deleting an event removes every photo and guest record for it straight away. Rate-limit records are deleted after a day.

Our database provider may keep encrypted backups for a limited period (up to 7 days on most plans). Deleted data drops out of those backups as they expire. Photo files themselves are not kept in backups once deleted.

If you're in a photo and want it removed, ask the organiser of the event. They can delete any photo. Organisers can delete their account data by deleting their events and contacting us to remove the account.

By joining an event you agree to only take photos that people are comfortable sharing with the group. Be especially careful with photos of children. Organisers can remove photos and turn off a camera that's being misused.