Privacy Policy

Last updated: October 12, 2026

What we collect

• Event details — the event name and settings a host chooses when creating a roll.
• Guest info — the first name a guest enters, and a device identifier (stored in a cookie) used to track their shot count for that event. No account or email is required to join as a guest.
• Photos — the images guests capture through the camera, along with who took them and when.

How we use it

Event, guest, and photo data is used only to run the event: enforcing shot limits, showing the right gallery to the right guests, and letting the host manage or end the event. We don't sell this data or use it for advertising.

Who can see event photos

Photos are visible to anyone with the event's invite link or QR code, once the gallery reveal condition (instant or scheduled) has been met. Treat the invite link like an invitation — anyone who has it can view the gallery.

How long we keep data

Each roll has a retention window that starts on its event date and depends on its plan:

• Free rolls — the event, its guests, and all photos are permanently deleted about 30 days after the event date.
• Paid rolls — photos stay on our servers for about 90 days after the event date, then are moved to a private cloud archive (Dropbox) while the gallery keeps working, and the whole roll is permanently deleted about one year after the event date. We email the host roughly a week before that final deletion so nothing is lost by surprise.
• Demo events (the no-signup planning demo) are cleared automatically within a couple of days.

A host can also end their roll at any time, which deletes it — and every guest record, photo, and file tied to it — immediately.

Camera and device access

Taking a photo requires camera access, which your browser asks you to approve. We only access the camera to capture the photo you take — we don't record video or access the camera outside of the moment you tap the shutter.

Signing in with Google

If you choose "Continue with Google", we only ask Google for your email address, which we use as your account login, exactly as if you had signed in with an emailed code. We don't receive your Google password, contacts, or any other data from your Google account.

Cookies

We use two small, functional cookies per event: one to remember a guest's identity and shot count on their device, and one (for hosts) to authorize event management actions. These aren't used for tracking across other sites.

Analytics

We keep basic, first-party usage data — which pages are viewed, how long they stay open and how far they're scrolled, which buttons and links are clicked, whether you're on a phone or a computer (from screen width), and steps like starting a demo, signing in, or creating an event — to understand how the site is used. A single random cookie lets us count returning visitors. We do not store your IP address or browser user-agent, use third-party analytics services, or track you across other sites. These aggregate counts are pruned automatically after 180 days.

Contact

Questions about this policy or a request to delete your data? Email support@friendslens.net.