Privacy Policy

• Anyone with an event’s invite link or QR code can view that event’s gallery. Share links with care.
• We use your information only to run the service. We do not sell it, and we do not show ads.
• Photos are stored exactly as uploaded, including any location data your camera saved in the file.
• You can ask us to delete your account, your photos, or a photo of you at any time.

If you create an account (hosts, and guests who sign in): your name, email address and profile picture, provided through our sign-in provider, Clerk. We never see your password.

If you join an event as a guest without an account: the display name you type. Your browser keeps a small guest identifier for that event so you can delete your own uploads later.

Photos and videos you upload, with their file name, size, dimensions, upload time and a digital fingerprint (used to spot exact duplicates). Files are kept as uploaded, so any information embedded in them, such as camera model or GPS location, is kept too. If you prefer, turn off location tagging on your camera or remove it before uploading.

Technical information: your IP address, recorded with security-relevant actions such as uploads, joins and reports, and cleared from those records after 90 days. To count unique visitors and enforce fair-use limits we also store one-way scrambled (hashed) versions of your IP address, which we cannot turn back into the address.

Payments: paid plans are processed by Stripe. We store your Stripe customer reference and subscription status. Card details go directly to Stripe; we never see or store them.

Reports: if you report a photo, we store the reason and any note you add.

• To run events and galleries: show photos to the people the host invited, make previews, detect duplicates, and let hosts moderate.
• To keep the service safe: prevent abuse and spam, enforce plan and fair-use limits, and investigate reports.
• To handle accounts and billing.
• To understand basic usage of an event (for example, how many people visited), shown only to that event’s host.

We do not sell or share your personal information for advertising, we do not use advertising trackers, and we do not use facial recognition. If we ever add features that analyse faces, we will ask for your consent first.

• An event’s gallery is visible to anyone who has its invite link or QR code. Links can be forwarded, so treat them like an unlisted album.
• Uploader names are shown next to photos unless the host turns on anonymous uploads.
• The host can see the guest list, uploads, visitor counts and reports for their event, and can hide or remove any photo.
• Our service providers process data on our behalf, only to provide the service: Clerk (sign-in), Stripe (payments), Cloudflare (file storage and delivery) and our hosting providers.
• We may disclose information if the law requires it, or to protect people from harm. We report child sexual abuse material to the U.S. National Center for Missing & Exploited Children (NCMEC), as U.S. law requires.

We use only what the service needs to work: sign-in cookies set by Clerk, browser storage that remembers your guest identity for each event you join, and the app’s offline files so it loads quickly. We do not use advertising or analytics cookies, so there is nothing to opt out of.

• Account information: until you ask us to delete your account.
• Photos and videos: until the uploader or host deletes them, or the event or account is deleted. Deleted items disappear from the gallery immediately and are erased permanently, including stored copies, 30 days later (the host can restore them until then). Deleted events are erased the same way after 30 days.
• IP addresses in security records: 90 days.
• The public demo event is wiped and recreated every night.
• Billing records: as long as tax and accounting law requires.

You can delete your own uploads from the gallery at any time, and use Report on any photo to ask the host to remove it, for example a photo of you. To access, correct or delete your information, or to have something erased permanently, use the Report button on the photo, or contact the operator through munashemudabura.com. We will respond within 30 days.

Depending on where you live (for example in the EU, UK or California), you may also have the right to object to or restrict some uses, to receive a copy of your data, and to complain to your data protection authority. We will not treat you differently for using these rights.

EventShare is not meant for children under 13, and we do not knowingly collect information from them. Events often include photos of children taken by adult guests; parents or guardians can report such a photo or contact us to have it removed.

Data is sent over encrypted connections, files are delivered through short-lived signed links, and only the event host can manage an event. No system is perfectly secure, so please share invite links only with people you trust. We are based in the United States and process data there and with the providers listed above.

If we change this policy we will update the date at the top, and tell account holders about important changes. Questions or requests: use the Report button on the photo, or contact the operator through munashemudabura.com. See also our Terms of Use.