Privacy Policy

We collect only the data needed to run SnapRooms:

• Email address — when you create an event or sign in as an owner.
• Optional guest name — when a guest uploads a photo and chooses to share it.
• Uploaded photos — images guests add to an event.
• Event metadata — event name, slug, creation date, and related settings.
• IP address — implicitly collected via server logs and used for security (rate limiting).

• To create and manage events for event organizers.
• To let guests upload and share photos within an event.
• To authenticate owners and protect account access.
• To send password recovery and event-setup emails.
• To prevent abuse and spam through rate limiting.

• Database: Event and owner data is stored in PostgreSQL (Neon).
• File storage: Photos are stored in secure blob storage.
• Passwords: Owner passwords are hashed with salt — we never store plain text passwords.
• Tokens: Session and recovery tokens are time-limited and cryptographically signed.

• Event owners can view and manage the events and photos they own.
• Guests can only view and upload photos to the specific event they have a link or QR code for.
• We do not sell, share, or publicly index your data.

We use PostHog, a third-party product-analytics service, to understand how SnapRooms is used so we can improve it. Part of this is optional, consent-gated browser tracking (described below); separately, our servers also record certain product events directly as part of operating the Service, independent of that browser consent choice (also described below). Both are separate from the data described above, which we always need to run the Service.

• Browser tracking: for guests, PostHog assigns an automatically generated, non-identifying technical ID to record which pages are viewed and which buttons are used. For signed-in Owners, browser events are linked to a stable, internal account identifier (never your email), so this is pseudonymous rather than fully anonymous — it can, in principle, be linked back to your account. Automatic session recording and automatic click-tracking are both switched off in our configuration; we only record the specific events listed in our codebase.
• If you decline or have not yet responded to the cookie banner, this browser-based PostHog tracking is never loaded and none of the above is collected. This choice does not affect the separate server-side recording described next.
• Server-side recording: independently of the cookie banner, our servers directly record certain product events for signed-in Owners (for example, actions tied to your account) as part of operating the Service. This is not gated by the browser cookie-consent choice above, and rejecting or withdrawing that consent does not stop it.
• You can review, change, or withdraw your choice for the browser-based tracking above at any time using "Cookie Preferences" in the footer.

Processor and retention: PostHog Inc. is the processor for both the browser and server-side analytics described above. The specifics of our data-processing agreement, applicable international data-transfer safeguards, and the retention period for analytics events have not yet been confirmed — their absence from this page is not a statement that these requirements are already met, and they remain pending DPO/legal verification.

• Passwords are hashed with industry-standard algorithms.
• Session tokens are signed and expire automatically.
• Rate limiting protects against brute-force and spam attacks.
• HTTPS is enforced for all traffic.

• Owner accounts: Retained until you delete your events or request account deletion.
• Events and photos: retained according to your plan (Free: 90 days; Pro Event: 12 months; Wedding Pro: 24 months; Professional: while active + 90-day grace period after cancellation). The SnapRooms Vault add-on extends retention while active.
• Photos: Deleted automatically when the associated event is deleted.
• Recovery tokens: Expire automatically after 30 minutes.
• Setup tokens: Expire automatically after 24 hours.
• Server logs: Short-term retention for debugging and security only.
• Before automatic deletion, we may send you a reminder email so you can download your data.

Under GDPR and similar privacy laws, you have the right to:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — request deletion of your personal data and events.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured format.

You can delete an event and its photos at any time from your dashboard. If you want us to delete all data associated with your email address, contact us at hello@snaprooms.app.

We will process deletion requests within 30 days and confirm once completed.

Questions about privacy? Reach us at hello@snaprooms.app.