1. Scope
This policy applies to couples and event owners, wedding guests who use a QR link, and visitors to our website.
The service is not intended for children under 13.
2. Data we collect
We may collect the following types of data.
- Name from Google account profile, if available
- Email address from Google Sign-In
- Account and authentication identifiers
- Wedding or event title
- Wedding or event date
- Cover image and gallery settings
- Support messages
- Payment and order metadata from Paddle
- Guest upload activity, event ID, and browser-local guest identifier
- Uploaded photos and videos
3. How we use data
We use data to create and operate wedding galleries, let guests upload media, let owners manage content, provide support, process payments, prevent abuse, improve the service, and comply with law.
- Create and operate wedding galleries
- Let guests upload photos and videos
- Let owners manage and delete content
- Deliver QR-based access
- Provide support
- Process payments
- Prevent abuse and unauthorized access
- Measure product usage and improve the service
4. Legal bases
Where required by law, we rely on performance of a contract, legitimate interests, consent, or compliance with legal obligations.
5. Sharing data
We share data only with service providers and in limited legal situations.
- Google and Firebase for authentication, hosting, database, and storage
- Cloudflare for delivery and object storage
- Paddle for payment processing, tax handling, and invoicing
- PostHog for analytics, autocapture, and session replay
- Tawk.to for live chat support
6. Payment data
Payments are processed by Paddle.
We do not store full card details on our servers.
7. Cookies and local storage
We use cookies and browser storage for essential site behavior, sign-in, guest identity storage, interface preferences, analytics, autocapture, session replay, and other service functions.
See the Cookie Policy for more detail.
8. Guest content and deletion
Guests can delete their own uploads, and the event owner can delete any upload in their event.
We may also remove content or access when needed to protect the service, users, or legal compliance.
9. Retention
We retain wedding gallery content for up to 6 months after the wedding date unless the owner or guest deletes it earlier or we need to keep it longer for legal, security, fraud-prevention, or dispute reasons.
We may keep some transactional or support records longer when required by law or for legitimate business needs.
10. Security
We use reasonable technical and organizational safeguards intended to protect personal data.
No online system is perfectly secure, so we cannot guarantee absolute security.
11. International transfers
Your data may be processed in countries other than your own, including the United States and other locations where our providers or infrastructure operate.
When required, we use appropriate safeguards for cross-border transfers.
12. Your rights
Depending on where you live, you may have rights to access, correct, delete, object to certain processing, withdraw consent, request a copy of your data, and complain to a data protection authority.
- Access your data
- Correct your data
- Delete your data
- Object to certain processing
- Withdraw consent where processing is based on consent
- Request a copy of your data
13. Children
The service is not intended for children under 13.
If we learn that we collected personal data from a child under 13, we will take reasonable steps to delete it.
14. Changes to this policy
We may update this Privacy Policy from time to time. If the changes are significant, we will try to notify you through the service or by email.