Privacy Policy
Last updated: July 2026
What we collect
When you create an event or upload photos, we store the event name (optional), photo files, filenames, and upload timestamps. Our hosting provider (Vercel) may log IP addresses and request metadata. We use Vercel Analytics for anonymous page-view statistics only if you accept analytics cookies — see Cookies below.
How we use it
Data is used solely to operate the photo-sharing service: displaying galleries, generating share links, and deleting content after the retention period.
Retention
Events and all associated photos are automatically deleted approximately 3 days after creation. No backups of expired content are kept.
Access model
There are no user accounts. Anyone with an event link and the three-word passphrase can view and upload photos. Treat links and passphrases as credentials — do not share sensitive content.
Subprocessors
We use the following third-party providers to run the service. They process data on our behalf under their own terms and privacy policies:
| Provider | Country | Purpose | Privacy policy |
|---|---|---|---|
| Vercel Inc. | United States | Hosting, serverless functions, request logs, and anonymous analytics | View policy |
| Cloudflare, Inc. | United States | Object storage (R2) for uploaded photos | View policy |
| Neon, Inc. | United States | PostgreSQL database for event metadata | View policy |
| Upstash, Inc. | United States | Rate limiting (short-lived IP-based counters) | View policy |
International transfers
Data may be processed in the United States and other countries where our subprocessors operate. By using the service, you acknowledge that your data may be transferred internationally. Subprocessors are selected for reliability and security practices appropriate to the data they handle.
Your rights
Because content expires automatically, deletion happens without a request. For other privacy inquiries, contact us at [email protected].