Skip to content

Privacy

Privacy policy.

Last updated October 2026

This is a working draft written in plain language. It is pending legal review and may change before launch.

The short version

  • Browsing a gallery needs no account. We use one first-party cookie to count visits and remember your saved photos.
  • We only ask for your email when you sign up for a "photos are live" message, buy something or request a free download.
  • We don't use facial recognition, and we don't sell your data.
  • You can ask us to take down a photo of you at any time.

What we collect

When you browse

A random visitor ID stored in a first-party cookie, the pages and photos you view, which link or QR code brought you, a coarse device type (phone, tablet or desktop), and a one-way hash of your IP address that we use to stop abuse. We don't use third-party advertising trackers.

When you give us your email

Your email address and what it was for: a notification signup, a purchase or a free download. For purchases, Stripe collects your payment details. We receive confirmation of payment, the amount and the email used.

Photographers and organizers

Account details (name, email) and the events and photos you manage.

How we use it

  • To show galleries, remember saved photos and deliver what you bought.
  • To send the emails you asked for. A notification signup means one email when photos go live.
  • To give organizers and sponsors aggregate numbers, such as visits, scans and downloads. They don't get your email unless you opt in.
  • To prevent fraud and abuse.

Photos of you

Event photos are taken in public settings with the organizer's permission. Photos are organized by time and place, not by identifying faces. If you'd rather a photo of you wasn't online, use the removal form and we'll review it within 48 hours. Requests about children are prioritized.

Who we share with

Service providers that help us run the site: Stripe (payments), Cloudflare (photo storage and delivery), our email provider, our hosting and database providers, and error monitoring. Each processes data only to provide its service to us.

How long we keep it

Raw analytics events are kept for about 13 months, then reduced to daily totals. Purchase records are kept as long as tax law requires. Photos stay online for at least 12 months after an event unless removed.

Your choices

You can unsubscribe from any email with one click, clear your cookie at any time, and ask us to access, correct or delete your data by emailing hello@everyroll.app.