Privacy Policy
In short
Guest Album stores what is needed to run your albums and to count how the site is used. No advertising, no selling of data. You can delete everything yourself.
What we store about hosts
Your email address and, if you sign in with Google, the name and picture Google provides. The albums you make: title, date, welcome line, theme and settings. Your language preference. Sign-in codes are stored only as a hash for ten minutes, then deleted. An album made in Canva also stores your Canva user identifier and the design's identifier, to link the design to the album. Deleting the album or your account removes that link.
What we store about guests
The name a guest types, kept on their device and attached to what they add. An anonymous identifier created by Firebase Authentication so the album can tell contributions apart. The photos and videos they add, with the time they were added. Likes on photos. No email address is asked of a guest.
Where files live
Photos and videos are stored in Google Cloud Storage through Firebase, in the United States. A smaller preview of each photo is made on the guest's own device before upload; the original is stored as is. Files are readable by anyone who has the album's link, which is how an album works.
Cookies
Two cookies of our own: one that remembers your language, and one that keeps a host signed in. Google Analytics sets two more to count visits. Details are on the Cookie Policy page.
Measuring use
Guest Album uses Google Analytics, through Firebase, to measure how the site is used. It records the pages you open and a few actions: signing up or signing in, creating an album, sharing an album, a guest adding a photo or a like, and whether an album received photos from guests in its first three days. Each is tied to a random identifier kept in a cookie on your device and, when you are signed in, to your account's identifier. Google also works out the device, browser and approximate location of a visit. Google Analytics does not store IP addresses. It never receives your name, your email address or your photos. To opt out, install Google's opt-out add-on from tools.google.com/dlpage/gaoptout or block cookies for this site.
Who else touches the data
Google Firebase (authentication, database, file storage, hosting, and Google Analytics for measuring use) and Resend (delivering the sign-in code email). Each processes data only on our instructions.
How long we keep it
Albums and their content stay until the host deletes the album or the account. Deleting an album removes its photos, videos, guest names and likes. Deleting an account does that for every album the account made, then removes the profile and the sign-in record.
Your rights
You can see, download and delete your content from the app itself. For anything else, including a guest who wants a photo of themselves removed from an album they do not control, write to support@guestalbum.so and we will act within 30 days.
Guest Album is operated by WaspThemes. Contact: support@guestalbum.so.