Privacy policy
Last updated 2026-10-30
The short version
Albums are private to people with the link. We don't sell data, show ads or use tracking cookies. Photos are deleted automatically when an album's plan ends, and hosts can delete any photo or the whole album at any time.
Who is responsible
For the photos in an album, the person who created the event (the host) decides what is collected and who can see it, and Scan & Snap processes the photos on their behalf. For host account details (event name, date, email address and payment records), Scan & Snap is the controller.
What we collect
- Hosts: event name and date, and payment confirmation from Stripe (we never see your card number).
- Guests: the photos and videos you choose to upload, and an optional name you type in. No account is needed.
- Technical: IP addresses are used briefly to prevent abuse (rate limiting) and appear in short-lived server logs.
Photo metadata
Shared copies of photos (thumbnails and the versions guests see) are saved without EXIF metadata, so GPS location and device details are removed. On paid plans the host can download the original files, which keep whatever metadata the guest's phone stored.
How long we keep it
Free albums are deleted 7 days after creation. Paid albums are deleted one year after upgrading. Deleted photos are removed from our servers; backups roll over within 30 days.
Where it's stored
On our own servers in the EU, served through Cloudflare. Payments are handled by Stripe.
Cookies
We don't use tracking or advertising cookies. The guest page may remember the name you typed in your own browser's local storage, for convenience.
Your rights
You can ask for access to, correction of, or deletion of your data. If you're a guest and want a photo removed, ask the host, or contact us and we'll pass it on or remove it. You can also complain to the Data Protection Commission (Ireland).
Contact
hello@scanandsnap.com