Privacy policy

This product is unusual in one specific way that most privacy policies don't account for: the people in the photos are frequently not the people who uploaded them. A guest photographs someone across the room, uploads it, and now we're holding a photo of a person who never opened the app, typed a code, or agreed to anything. This policy tries to be honest about that rather than pretend it isn't true.

What we collect

• Photos and video that guests add to an event's gallery.
• A name, typed by each guest when they join — no email or password required to join an event.
• EXIF metadata, including GPS location where a device recorded it, on the original file a guest uploads. This original is kept but never shown to other guests — every version they see has that metadata stripped.
• Basic technical data — IP address and browser information — used for abuse prevention and nothing else.

Who controls what

The person hosting an event (the "host") decides who can see, hide or remove photos in their gallery, and is responsible for telling their guests how photos from the event will be used. We operate the infrastructure; the host is the one running the event.

How long we keep it

Photos and event data are kept for one year after the event by default. A host can request deletion sooner. Keeping data longer than a year is a deliberate exception we make, not a silent default.

Who can see original files

Full-resolution originals, with their full EXIF data, are visible only to the event's admin — never to other guests, and never shown in the public gallery, slideshow, or anywhere else on the guest surface.

Guests who want a photo removed

Anyone who appears in a photo they'd rather wasn't shared can ask the event host to remove it — hosts can remove any individual photo, or hide a gallery entirely, from their admin controls. If you don't know who's hosting the event a photo came from, contact us and we'll help route the request.

Contact

Questions about this policy: privacy@thephoto.party.