Privacy policy

The most important decision in this policy is architectural, not textual: guests' photos and videos go from their browser straight to the organizer's Google Drive. They never pass through our servers.

What stays on our infrastructure is a reduced thumbnail of each upload (used to display the gallery and the dashboard), the event details and the counters. None of it can be used to rebuild the original file.

We collect your email and name at sign-up, and your time zone to display dates correctly. Authentication is handled by Amazon Cognito; we never have access to your password.

When you connect Google Drive, we store an access token and the email address of the connected account. The token is never displayed, exported or sent to your browser, and you can revoke it at any time — from our dashboard or directly in your Google account.

We request the drive.file scope, which only grants access to files and folders created by the app itself. In practice: we can see the Fotografou folder and what is inside it, and nothing else in your Drive.

We don't request broad read access, don't list your other files and have no way to do so. Our use of this information complies with the Google API Services User Data Policy, including the Limited Use requirements.

Guests do not create an account and do not provide an email or phone number. If they want to join the leaderboard, they choose a nickname, which is visible in that event’s gallery and leaderboard.

To protect the page against abuse, we record an identifier derived from the IP address through a hash function, with automatic expiry. The IP address itself is not stored.

The participant identifier is randomly generated and kept in the guest's browser. It only serves to accumulate points and does not identify the person.

We use Amazon Web Services (infrastructure), Google (Drive and authorization), Stripe (payments) and Amazon SES (transactional email). Each receives only what it needs to do its job. When you pay, Stripe processes your payment and billing details under its own privacy policy; we never receive your card details.

We do not sell data, do not use album content to train models and do not show third-party advertising on event pages.

Event data and thumbnails are kept while the album exists. Deleting the album from the dashboard removes our records and the thumbnails.

We never delete the original files in Google Drive — they belong to the organizer, and the decision is theirs. When removing content from the gallery, the dashboard explicitly offers the option to delete it from Drive too.

To request deletion of your account and all associated data, write to hello@fotografou.com.

Depending on where you live (for example under the GDPR in the EU and UK, or state privacy laws in the US), you may have the right to access, correct, export, restrict or delete your personal data, and to object to its processing. Most of this can be done directly in the dashboard.

For anything else, contact hello@fotografou.com. We reply within 30 days.