Who we are
The service is operated by BFarah [operator name and address: to be completed]. You can reach us through the request form on the home page [contact email: to be completed].
What we collect
It depends on how you use the service:
- Guests: the name you type when you join, the photos and videos you upload, the time they were taken (read from the file), and which event you joined.
- Hosts: your email address (used to sign you in with a link), the name and date of your celebration and its events, and your settings.
- Everyone: basic technical logs — IP address, browser type and the time of requests — used for security, abuse prevention and fixing errors. Error reports go to our monitoring service without photos.
Photos and the data inside them
Camera files carry hidden data such as the location where a photo was taken. The copies shown to other people have all of that removed. The original file is kept, with its data, only for the hosts to download.
Who sees what
- The hosts of the celebration see everything uploaded to it, including moments marked “only the hosts”.
- Other guests see your moments only according to the visibility the hosts chose for the event (open, after approval, private, or revealed at a set time) and your own choice for each moment (everyone, or only the hosts).
- People with the family view link see what guests see, read-only, for as long as the hosts keep the link on.
- No one else. Event pages are hidden from search engines. The link to an event cannot be guessed, but anyone who has it (and the PIN, if one is set) can join, so hosts should share it with care.
How long we keep it
- Photos and videos stay until the storage date agreed with the hosts for their celebration. The hosts are warned before that date and can download everything. After it, all photos and videos are deleted.
- A moment that is deleted by a guest or a host can be restored by the hosts for 7 days; then it is permanently removed from storage.
- Names, settings and the activity log of a celebration remain with it until the celebration itself is deleted.
- Technical logs are kept only briefly.
Your rights
- Guests: you can delete any of your own moments at any time from the album, and change whether other guests may see each one.
- Hosts: you can hide or delete anything in your celebration, block a guest, and download all originals.
- Anyone: you can ask us to delete everything we hold about you, or to tell you what we hold, by contacting us.
Who else handles the data
We use a few providers to run the service. They process data on our behalf and under our instructions; we never sell data.
- File storage (Cloudflare R2) for photos and videos.
- Email delivery (Resend) for sign-in links and notifications to hosts.
- Hosting (Railway) for the website, the database and the processing of uploads.
- Error monitoring (Sentry), which receives error reports without photos.
If we ever add a feature that sends photos to an artificial-intelligence provider, it will be clearly disclosed, switched on only by the hosts, and limited to the photos they select.
Cookies
- A cookie per event that remembers you joined it (kept for up to 90 days).
- A cookie that remembers your language.
- For hosts, a sign-in session cookie.
There are no advertising or tracking cookies.
Photos of other people
Guests upload photos of people at the celebration, including children. The hosts are responsible for telling their guests that photos are being collected and for removing anything a person does not want shared. If you are in a photo you do not want kept, ask the hosts or contact us.
Changes and contact
If this policy changes in a way that matters, hosts are told by email. Questions, requests and complaints: through the request form on the home page [contact email: to be completed].
Applicable law and supervisory authority: [to be completed].