Privacy Policy for Guest.Gallery

Last Updated: 13/04/2026

Thank you for choosing Guest.Gallery. We are committed to protecting your personal information and respecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your data when you use our services.

1. Personal Data We Collect

  • Account Information: When you sign up using Google, we collect your email address and any other information provided by Google, such as your name.
  • User Content: Photos and videos you upload from your events.
  • Transaction Information: Payment, billing, and purchase metadata related to your order, subscription status, or event purchase. Payment card details are processed by Stripe and are not stored by us in full.
  • Print Order and Delivery Information: If you buy printed products, we may collect order customization details, selected designs, quantities, event links, QR code destinations, delivery name, delivery address, phone number, email address, shipping status, tracking information, and support messages or photos related to the order.
  • Usage Data: Information about how you interact with our service, including analytics, device, browser, and event interaction data.

2. How We Use Your Personal Data

  • Service Provision: To provide and maintain the service, including account access, event galleries, uploads, downloads, ZIP generation, storage, and archival workflows.
  • Communication: To send important updates regarding your events, purchases, archive dates, login links, or account.
  • Print Order Fulfillment: To produce, review, ship, support, and document printed product orders, including handling delivery questions, freight damage claims, missing or incorrect item reports, and customer support requests.
  • Analytics and Improvement: To analyze usage and improve our platform.
  • Security and Abuse Prevention: To secure the service, prevent fraud or misuse, troubleshoot issues, and enforce our Terms.
  • Marketing: Only if you have expressly opted in to receive marketing communications.

3. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Functionality: To ensure our website operates smoothly.
  • Analytics and Measurement: To collect data on how users interact with our site and marketing pages (for example, PostHog, Google Analytics, and Google Tag Manager).
  • Localization: To tailor content based on your location.

4. Data Sharing

  • Service Providers: We share personal data with service providers only where reasonably necessary to operate, secure, maintain, and improve Guest.Gallery. These recipients may include providers in the following categories: authentication and identity, hosting and database infrastructure, cloud storage and media processing, payment processing, transactional email, print production, fulfillment, shipping and delivery, analytics, and security or fraud-prevention services.
  • Current Provider Examples: Our principal service providers currently include Google, Supabase, Stripe, Cloudflare, Backblaze, Hetzner, Resend, PostHog, Google Analytics, and Google Tag Manager. For print orders, we may also share the information needed to produce and deliver the order with relevant production, fulfillment, and shipping partners.
  • Legal Compliance and Protection: We may disclose information where necessary to comply with applicable law, regulation, court orders, or lawful requests from public authorities, or to establish, exercise, or defend legal claims, protect our rights, investigate suspected fraud or abuse, or help keep the service secure.
  • No Sale or Rental: We do not sell or rent your personal data to third parties.

5. Data Retention

  • User Content: Stored until the archive date associated with your plan and selected activation or event date. After that date, content may be retained temporarily while we run archival, ZIP, deletion, recovery, or storage-migration workflows.
  • Account Information: Retained as long as your account is active or as needed to provide services.
  • Order and Delivery Records: Retained as needed to fulfill orders, provide support, document delivery, handle complaints or freight damage cases, prevent fraud, comply with accounting obligations, and establish, exercise, or defend legal claims.
  • Deletion Targets: We aim to remove active media from primary systems shortly after the archive date. In many cases this happens around 14 days after the archive date, but timing may vary.
  • Residual Copies: ZIP files and temporary archival, backup, cache, or recovery copies may remain for a limited period and are generally removed within six months after the archive date, unless a longer retention period is required for legal, security, fraud-prevention, or recovery purposes.
  • Analytics Data: Retained for analysis of user behavior and trends.

6. Your Rights

  • Access and Correction: You can access and update your personal information through your Google account or by contacting us.
  • Deletion: Request the deletion of your personal data by emailing us at contact@guest.gallery.
  • Opt-Out: Unsubscribe from marketing communications at any time.
  • Regulatory Compliance: We comply with GDPR and CCPA regulations, granting you additional rights regarding your personal data.

7. Data Security

We implement technical and organizational measures designed to protect your data:

  • Transmission Security: Data is transmitted over encrypted connections where supported.
  • Provider Security Controls: We rely on reputable infrastructure, storage, and payment providers to help secure hosted data.

8. International Data Transfers

We currently aim to keep core application data and uploaded media on infrastructure configured within the European Union where available.

However, some of the providers we use for email delivery, analytics, payments, identity, support, or security may process or access personal data outside the EU or EEA. Where required, we rely on lawful transfer mechanisms and safeguards such as adequacy decisions, the European Commission's Standard Contractual Clauses, the EU-U.S. Data Privacy Framework, or equivalent safeguards recognized under applicable law.

9. Children's Privacy

  • Age Restrictions: Our services are not intended for individuals under the age of 13.
  • No Collection from Children: We do not knowingly collect personal data from children under 13. If we become aware of such data, we will take steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: