Privacy Policy

2. Information We Collect

Event Creators (Authenticated Users)

• Account information: your email address, and your name and profile picture when you sign in with Google. If you sign in with Apple, we receive the name and email Apple shares with us, which can be a private relay address if you choose to hide your email
• Event details you create (event name, date, type, and a cover photo if you add one)

Guests (Unauthenticated Uploaders)

• Photos and videos uploaded via the QR code link, stored in our cloud storage (Cloudflare R2) and, if the creator turns on Drive backup, copied to the creator's Google Drive
• Basic device metadata (browser type, upload timestamp) for troubleshooting
• No personal information, login, or account is required

Event Creators Using the Mobile App

• Crash reports: when the app crashes, a report of the error with device and app details (device model, operating system and app version), so we can fix it. Crash reports do not include your name, email or photos
• Product analytics: a small set of app events (signing in, creating an event, showing a QR code, starting a copy to your photo library) with device and app details, linked to your GuestDrop account ID, as described in section 7. PostHog estimates an approximate location (country or city) from your IP address
• No precise location, contacts, advertising identifier, or photos already on your phone

3. How We Use Your Information

• To authenticate you and manage your events
• To store uploaded photos and, if you turn on Drive backup, copy them to your connected Google Drive account
• To display the event gallery to you and your guests
• To send transactional emails (sign-in codes and event confirmations)
• To find and fix crashes and understand which app features are used

4. Photo Storage

GuestDrop stores the original photos and videos guests upload in secure cloud storage (Cloudflare R2), along with smaller copies used to display the gallery. If the event creator connects Google Drive and turns on backup, a copy of each original is also saved to a folder in the creator's own Drive. Each event has a storage allowance: 10 GB free, or 20 GB once a gallery extension is purchased. Events created before this storage model saved originals straight to the creator's Google Drive and keep working that way.

In the mobile app, you can copy an event's photos and videos into an album on your phone, or save a QR code image to your phone. The app asks for photo library access only when you first do this. The app saves copies into your library. It does not read, upload, or collect the photos already on your phone, and those copies stay on your phone. A record of which items were copied is kept on your phone so nothing is copied twice. If you choose a cover photo for an event, only the photo you pick is uploaded.

5. Payments

GuestDrop is free to use. Creating an event, generating a QR code, and collecting guest uploads never requires a payment method.

A creator may optionally make a single payment, for a single event, to extend how long that event's hosted gallery stays open past the free window. Dodo Payments, acting as Merchant of Record and responsible for tax collection and remittance across 190+ jurisdictions, processes this payment. The processor receives the transaction information it itself requires to complete the payment, under that processor's own privacy policy. GuestDrop receives back only a payment confirmation plus the processor's order and transaction identifiers and the amount, which we store against the event. GuestDrop does not request or store card details.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only with:

• Google: for sign-in with Google and, if you turn on Drive backup, copying photos to your Drive (per your consent)
• Vercel: our hosting provider (infrastructure only)
• Dodo Payments: processes optional retention-extension payments, as described in section 5
• PostHog and Google Analytics: on the website, they receive a visitor identifier only if you accept product analytics. In the mobile app, PostHog receives the app events described in section 7
• Apple: for Sign in with Apple, if you use it
• Resend: delivers our emails, including sign-in codes
• Sentry: receives crash reports from the mobile app

7. Cookies and Analytics

We use essential cookies to keep you signed in. We use PostHog for product analytics, so we can see which features are used and where the product is confusing, and improve it. PostHog sets a first-party cookie holding a random visitor identifier. That cookie is not an advertising cookie and is not used for cross-site tracking, and GuestDrop uses no advertising or cross-site tracking cookies of any kind. Product analytics stays off until you turn it on: the first time you visit, a banner asks whether you accept, nothing is captured unless you accept, and if you decline or never answer, no analytics cookie is set and no analytics events are sent. You can change your answer later by clearing this site's data in your browser. Vercel Web Analytics and Vercel Speed Insights measure page performance, and neither sets a cookie nor stores an identifier for you. If you accept, Google Analytics is also loaded and sets its own first-party cookies to measure how people arrive at and move through the site. It is not loaded unless you accept.

The mobile app uses no cookies and shows no analytics banner. It sends the small set of app events listed in section 2 to PostHog, linked to your GuestDrop account ID, and sends crash reports to Sentry. The app does not track you across apps or websites owned by other companies, does not use an advertising identifier, and does not share data with data brokers or advertisers.

8. Data Retention

An event's gallery stays open for the window the creator selects when the event is created, up to 7 days after the event date. A creator may optionally purchase an extension adding 30 days or 1 year on top of the event's current expiry, and repeat purchases stack. After expiry, event metadata stays in our database until the creator deletes the event from their dashboard, which removes it permanently.

When a gallery closes, guests lose access and the creator has 30 days to download the originals or back them up to Google Drive. We email the creator when the gallery closes and again 7 days before deletion. 30 days after the gallery closes, we delete the originals and the copies we made from them from our storage, whether or not a Drive copy exists. Copies in your Google Drive remain in your Drive. We do not delete them. For older events that saved originals straight to Google Drive, uploads held in our storage are deleted 14 days after upload. Deleting an event removes its records from our database.

You can delete your account at any time, in the mobile app or in your account settings on the web. Deleting your account deletes all your events, their photos and videos, and the copies we made from them, and removes your account and sign-in details. Purchase records are kept for tax and accounting purposes, with your name and email removed. Copies in your Google Drive or your phone's photo library stay yours. We do not delete them.

9. Your Rights

GuestDrop serves creators and guests worldwide. Depending on where you are, your personal data may be protected by India's Digital Personal Data Protection Act, 2023 (DPDPA), the EU General Data Protection Regulation (GDPR), or the UK GDPR. The list below is the combined set of rights those laws grant. You may exercise any right that applies to you without needing to tell us which law you are relying on.

• Access your personal data
• Request correction or rectification of inaccurate data
• Request deletion or erasure of your data
• Request restriction of processing
• Receive your data in a portable format and have it transferred to another provider where technically feasible
• Object to processing
• Withdraw consent for data processing at any time, without affecting processing already carried out
• Lodge a complaint with a data protection authority: your country's data protection authority if the GDPR applies to you, or the UK's Information Commissioner's Office (ICO) if the UK GDPR applies to you

To exercise these rights, contact us at support@guestdrop.app. You can also delete your account yourself, as described in section 8.

10. Security

All data is transmitted over HTTPS. Authentication tokens are stored securely. In the mobile app, your sign-in session is kept in your phone's secure storage (the iPhone Keychain or the Android Keystore). We follow industry-standard security practices to protect your information.

11. Contact

For privacy-related questions, contact us at support@guestdrop.app.