Ir al contenido
Crear evento gratis
ES
EnglishEspañol

Esta página solo está disponible en inglés.

Privacy Policy

Effective November 14, 2026

This policy explains what IDoSnap.com ("IDoSnap.com", "we") collects, why, who we share it with, how long we keep it, and the choices you have. It covers hosts with accounts, guests using event pages, partners, and visitors to idosnap.com.

The short version: we collect what is needed to run your event's gallery. We do not sell personal information, show ads, use your photos to train AI, or track you across other websites. Automatic facial matching is off unless the hosts turn it on, and even then it only works for guests who consent.

1. Hosts' events and our role

An event's photos, videos and messages are collected for its hosts, who decide who can see them and how long to keep them (within their plan). We process event content on the hosts' behalf and for running the service. Requests about a specific photo, such as asking for one of you to be removed, can go to the hosts or to us; we will help.

2. What we collect

  • Hosts and partners: name, email address, password (stored only as a salted hash), event details (names, date, time zone, venue text, schedule, tables, shot lists), settings, invited co-hosts' email addresses, and for partners, business name, website and logo.
  • Payments: Stripe collects your card details. We receive and keep the plan, amount, date, status and Stripe's payment references, but not your card number.
  • Guests: a random device identifier stored in a cookie; optionally your name, email address, table, and requests for an "album is ready" email or a reminder; what you upload, with its file metadata (such as the time taken, camera model and, if your phone recorded it, location; location is kept only in the original file and never shown in the gallery); your comments, reactions, song requests, and written, voice or video guestbook messages, plus transcripts of recordings on plans that include them.
  • Phone and text features: your phone number, the messages and media you send, the times, and the delivery status of our replies. For voice messages, the recording and the calling number.
  • People tags: names guests give to people in photos, the clarifiers and search names they add, who confirmed each tag, and each person's choice of who can find photos of them.
  • Automatic facial matching (only if you agree, and only where offered): your encrypted reference photo until uploads close, and the list of Event photos you appear in. See the Biometric Data Policy.
  • Contact form: your name, email address, message, event details you choose to give, and your IP address. Cloudflare Turnstile checks that you are not a bot.
  • Technical data: our servers log each request's IP address, time, page, browser type and referring page, for security, troubleshooting and aggregate traffic reports. Signed-in sessions record the IP address and browser type. Cloudflare Web Analytics counts page views on our public and guest pages without cookies and without identifying individual visitors; it is not used on host or admin pages. We also count steps such as opening the demo, viewing pricing, signing up, creating a first event and completing a purchase, recording only the step, the page, the device type (phone, tablet or desktop), the referring website and the plan chosen, with no cookies, IP address, name, email address or account; these counts are deleted after 13 months.

Photos and recordings may reveal things about people, such as their appearance, health or religion. We do not try to infer such things, except that automatic facial matching compares faces for guests who have consented.

3. How we use it

  • to provide the service: storing and displaying uploads, making thumbnails and video previews, converting formats, sorting photos by time, picking a best-of set, screening for explicit content, transcribing recordings, building reels, ZIP files and printables, and backing up files;
  • to send the emails and texts you request, plus account, payment and event emails to hosts (such as receipts, storage reminders and anniversary emails);
  • to process payments, prevent fraud, spam and abuse, keep the service secure, and fix problems;
  • to answer your messages; and
  • to comply with the law and enforce our terms.

Screening, quality scoring and face matching of photos run on our own servers. Some optional features use outside services named under "Service providers" below: English and Spanish translation of messages and captions (Anthropic), only on events where the hosts turn it on, and transcription of guestbook recordings (Groq), only on plans that include transcripts. They receive only the text or recording to be processed. We do not use personal information for targeted advertising or sell it, and we make no decisions about people that have legal or similarly significant effects based solely on automated processing.

4. Emails and texts

Guests get email only if they ask: one "album is ready" email, at most one reminder, and, if they used automatic facial matching, one "we found you" email. Hosts get emails about their account and events. Every non-essential email can be turned off by replying or through our contact page. For texts, reply STOP to opt out and HELP for help. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all of the sharing described in this policy and will not be shared with any third parties.

5. Who we share it with

  • Hosts and co-hosts of the event: everything shared to it, including guests' names and the email addresses guests provide.
  • Other guests and anyone with the event link, depending on the hosts' gallery settings.
  • Service providers who process data for us under contract: our server host in the United States; Cloudflare (file storage, Turnstile and Web Analytics); Forward Email (sending email); Stripe (payments); Amazon Web Services and Google Cloud (long-term and backup storage of files); Twilio (text messages and calls, and the phone number for an Heirloom event, only on events that use them); Anthropic (English and Spanish translation of messages and captions, only on events where the hosts turn it on); Groq (transcription of guestbook recordings, only on plans that include transcripts); Google Fonts (serves the site's fonts, so your browser connects to Google); and a separate backup storage provider for copies of original files.
  • Services you connect: Google Drive or Dropbox, if a host turns on cloud export to them. Files exported there stay in that account even if they are later deleted from IDoSnap.com.
  • Partners: a partner who referred a host sees that host's event names, dates and activity counts, not its photos.
  • Legal and safety: when required by law or valid legal process, to protect someone's safety, or to report child sexual abuse material to the National Center for Missing & Exploited Children.
  • Business transfer: to a buyer or successor of the service, who must honor this policy for the data it receives.

6. Cookies and device storage

We use only first-party cookies needed for the service, and no advertising or cross-site tracking cookies:

  • es_sess: keeps hosts signed in (60 days).
  • es_dev: a random guest device identifier, so you can manage your own uploads (3 years).
  • es_lang: your language choice (1 year).
  • es_ref: a partner's referral code, if you arrived through one (60 days).
  • es_flash: one-time on-screen messages (1 minute).

The guest page also stores your upload queue in your browser so interrupted uploads can resume. Our public pages remember the first page you opened in the current browser tab (session storage, cleared when the tab closes) for the aggregate counts described above. Cloudflare Turnstile on the contact form and Stripe on its checkout page may set their own cookies, for security.

7. How long we keep it

  • Event content (uploads, guestbook, comments, guests' names and emails): full-size original files for the plan's storage period (plus any extension). After that, the event is archived and its photo previews, captions, comments and guestbook text stay online indefinitely, until the hosts delete the event. Backup copies of the original files are kept for six months after the later of the end of storage and the end of any paid option, then deleted. Deleted photos and videos stay in the hosts' trash for 30 days, then are deleted with their previews and backup copies. Deleting a whole event takes effect 30 days after the owner asks (they can cancel until then).
  • Facial matching reference photos and automatic matches: reference photos are deleted when the guest withdraws or asks, when the owner permanently disables facial matching, when the event is deleted, or when its upload window closes, whichever comes first; automatic matches go when the guest withdraws or matching is permanently disabled. Manual People tags follow the event's photos.
  • Accounts: until you delete your account. Deleting it deletes your events.
  • Payment records: as long as tax and accounting law requires (generally 7 years).
  • Server logs: up to 90 days. Contact form messages: up to 2 years.
  • Copies: new uploads are also kept on our server for 24 hours. Database backups are kept for 14 days. Separate backup copies of original files are deleted with the file they back up, or as described above for archived events, and we use them only to restore lost files or for a restore the hosts pay for. Deleted data can stay in database backups until they expire.

8. Security

Connections use HTTPS. Media links are signed, passwords are hashed, and access to servers and storage is restricted. No system is perfectly secure; if a breach affects your personal information, we will notify you as the law requires.

9. Your rights and choices

Hosts can view, change, download and delete their events and account in the app. Guests can delete their own uploads from the gallery and delete their face data with "Forget me". Anyone can ask us, through our contact page, to access, correct, delete or get a copy of their personal information, or to stop a particular use. Depending on where you live (for example California, Colorado, Texas, Virginia or another state with a privacy law), you may have these rights by law, along with the right to appeal our decision. We will verify your request in a way that fits the information involved, respond within the time the law requires (usually 45 days), and not treat you differently for using your rights. If we deny your request, reply to our answer to appeal, and we will respond within 60 days. If your appeal is denied, you may contact your state attorney general. An authorized agent may make a request for you with your written permission. We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of, and we treat browser privacy signals (like Global Privacy Control) as such an opt-out anyway. If your request concerns content in someone's event, we may also involve the hosts.

10. Children

The service is not directed to children under 13, and we do not knowingly collect personal information from them. Guests under 13 should not enter their name, email or phone number, or use automatic facial matching. Photos of children may be taken by others at an event; a parent or guardian can ask the hosts or us to remove a photo of their child. If we learn that we have collected personal information from a child under 13 without a parent's consent, we will delete it.

11. Where data is stored

We store and process data in the United States. If you use the service from elsewhere, your information is transferred to the United States.

12. Changes and contact

We will post changes here and update the effective date. We will email account holders about material changes before they take effect. Questions or requests: our contact page.