Privacy Policy

What we collect

• Account details: the email address and name on your account when you sign in with email or Google.
• Guest details: the display name a guest enters and any guestbook notes they write. Guests do not create accounts.
• Photos: the images uploaded to your galleries, stored as re-encoded copies with metadata such as camera details and GPS location removed.
• Gallery and purchase records: event settings, moderation choices and the order records we need to activate access. Card details are collected by Dodo Payments, not by us.
• Technical data: our hosting and network providers process information such as IP addresses in request logs to deliver and protect the service.

Why we use it

Only to run the service you asked for: sign you in, show galleries to the people you share them with, provide downloads, take payments through Dodo Payments and answer support requests. We do not sell personal data and we do not use it for advertising.

Who processes it for us

• WorkOS: sign-in and authentication.
• Dodo Payments: payments, taxes and invoices, as Merchant of Record. Dodo Payments handles your payment details under its own privacy policy.
• img2site: photo storage and delivery. img2site stores the photos on Backblaze B2 in the European Union. When you upload photos, your browser sends them directly to that Backblaze B2 storage, which therefore also receives your IP address.
• Cloudflare: content delivery and DNS.
• Hetzner: server hosting.

Some of these providers are based outside your country, including in the United States. Where the law requires it, transfers rely on the safeguards those providers offer, such as standard contractual clauses.

Cookies and browser storage

We set one strictly necessary session cookie, gv_session, which keeps you signed in, and a short-lived cookie that holds your sign-in state while you log in. We use no advertising or analytics cookies. The app also keeps a few values in your own browser, which never leave your device unless you send them:

• gv_locale (local storage): the language you chose.
• gv_guest_name:<invitation> and gv_guest_mine:<invitation> (local storage): a guest's display name and the list of photos they uploaded from this device for that invitation, so the page remembers them. "Not you? Clear" on the guest page removes both.
• The plan you selected before signing in (session storage), so checkout can continue after sign-in. It clears when you close the tab.
• gv-uploads (IndexedDB): while photos are uploading, a copy of each photo waiting to upload with its file name, the contributor name and caption, and an upload key, so a reload or a phone that turned off can carry on without picking the photos again. Each photo's copy is deleted once it is stored; "Clear this list" on the upload tray and "Not you? Clear" delete them, an organizer's are deleted when they sign out, and anything left is deleted the next time you open a gallery on this site 13 hours or more after it was saved.

How long we keep it

Photos and gallery records are kept after paid access ends, so access can be restored with an extension. When access ends, viewing and downloads pause and the photos stay in the archive.

You can ask us to erase your account and your galleries at any time by writing to [email protected] from the address on your account. We handle these requests by hand and complete them within 30 days. Copies that people have already downloaded are outside our control and cannot be recalled.

If you uploaded photos as a guest and want one taken down, ask the organizer, who can hide it from the gallery, or write to us with the gallery link.

Your rights

Depending on where you live, you may have the right to access, correct, export or erase your personal data, and to object to or limit how we use it. Email us to use any of these rights. If you are in the EU or UK, you can also complain to your local data protection authority.

Children

Accounts are for adults. Organizers are responsible for how photos of children taken at their events are shared.

Changes

If this policy changes, the new version will be posted on this page with a new date at the top.