Privacy & service policies

Who operates this service

Operator identity has not been configured. A working support contact must be published before paid launch. No domain ownership, legal entity registration, or trademark registration is implied by this working brand.

The operator’s location and postal contact have not both been published. These business details must be completed before purchases open.

One wedding album

The offer is $49 USD once for one wedding and one verified owner, with applicable taxes disclosed in checkout. No subscription or automatic renewal. The lifetime allowance is 20,000,000,000 accepted bytes and 2,000 accepted originals, whichever is reached first. Test files count after upgrade; deletion does not restore allowance. A paid album before main collection has a 100,000,000-byte test allowance.

A private preview permits 10 files / 100,000,000 bytes for 14 days, with remaining preview media deleted within 30 days of creation unless upgraded. Supported formats and per-file limits appear in upload help. Service requires connectivity. Background uploads, offline collection, permanent hosting, and Live Photo motion preservation are not promised.

Service dates and retention

Main uploads open at the start of the wedding date minus 30 calendar days and close at the end of the date six calendar months after, using the event’s IANA timezone. Hosting ends at the end of the date 12 calendar months after, followed by 30 days of owner-only export/download grace. Active media is deleted after grace; backup media is purged within the following 30 days. The dashboard and checkout show exact dates.

Allowed date changes preserve the guest QR and must be confirmed after reviewing their effect. Postponement cannot extend the final event date beyond 12 calendar months after original payment. Previously promised hosting is not silently shortened, and date changes cannot reopen an already-used expired collection window.

Information we process

The service processes owner authentication email, wedding names/date/timezone, uploaded media, optional guest names and captions, usage and job records, and necessary payment identifiers. Payment card details are handled by the payment provider. Guests do not need an account or email to upload.

We use this information to provide the album, validate and protect originals, prepare previews and exports, provide operational notices, handle support, and prevent misuse. Uploaded originals may contain location or other metadata. Shared derivatives strip metadata where supported, but owners’ exact originals retain what the device submitted.

Sharing and access

The guest link is a capability: anyone possessing it can use its enabled guest functions. Guest viewing starts off; when enabled, only approved derivatives are shared. Guests cannot download originals. The owner can pause collection, hide approved media, delete files, or rotate the guest link. Search exclusion alone is not access control.

Infrastructure providers process data to deliver authentication, database, object storage, email, payments, web hosting, and background work. The intended providers are Supabase, Cloudflare R2, Resend, Stripe, Vercel, and Railway. The deployed provider list and processing regions must be confirmed before launch. Media is not used for AI training or marketing.

Deletion, backup, and records

Deleted media is removed from active access and scheduled for storage deletion; backup copies are purged within 30 days of the applicable deletion deadline. Deletion tombstones are retained to prevent deleted media from reappearing during recovery. Necessary billing and dispute records are kept separately from media under the operator’s approved retention policy.

Temporary exports expire and are removed on the documented schedule. Short-lived authorized URLs may continue working until expiry after a visibility change or deletion. Backups at the same storage provider are not independent protection against a provider-wide outage. Backup and restore readiness must be verified before paid launch.

Operational messages and analytics

Authentication, payment, export, expiry, and service messages are operational. Marketing consent is separate. Private guest/upload surfaces do not send guest files, names, emails, access tokens, or private URLs to advertising systems. Public analytics, if enabled, follow the configured consent policy; billing records remain authoritative for purchases.

Refunds and problems

Refund eligibility and response expectations must be approved and published by the operator before paid launch, without limiting any mandatory consumer rights. Contact support with your owner email and receipt identifier to request assistance. A refund or dispute can pause uploads; it does not silently delete accepted originals, which remain subject to an explicit recovery/download policy.

Your responsibilities

Upload only media you are entitled to share, obtain appropriate permissions from people depicted, and keep owner sign-in links private. Do not upload malicious, unlawful, or unrelated material. Download and verify your originals before the stated deadline. The service may reject unsupported or unsafe files.

Requests and corrections

Use album controls for ordinary media deletion and privacy settings. For access, correction, deletion, billing, or privacy requests beyond self-service controls, contact the published support route. Identity verification may be needed to protect the album.