Privacy policy

For account, sign-in and payment data, the data controller is [To be completed: company name] ([To be completed: registered address]), contact: [To be completed: contact e-mail address].

For the photos and videos of an event, the organiser decides how they are used; Sunopic hosts them on the organiser’s behalf to run the service. [To be validated by a lawyer: roles of Sunopic, the organiser and the guests.]

Depending on how you use the service:

• organiser: e-mail address, optional display name, language, events created and their settings, purchases (Stripe payment identifiers, amount, event title);
• sign-in: a single-use token sent by e-mail, and a fingerprint (SHA-256) of the IP address kept for 15 minutes to limit abuse; with Google, the Google identity (e-mail, name); Cloudflare Turnstile anti-bot check on the link request;
• guest: an anonymous identifier created when joining, the optional first name, the date the terms were accepted, their photos and videos; an e-mail address only if the guest asks to be told when the album is ready, with a separate consent;
• photos and videos: the original file with the paid plan, a display version and a thumbnail without GPS coordinates, the date taken and the author (guest);
• reports: a salted hash of the session or address of the person reporting, never their identity;
• technical logs: errors (Sentry, with no personal data), the log of automatic e-mails and the audit log of sensitive actions, with no names.

We use this data to:

• provide the service you ask for: account, events, albums, payments, e-mails related to your event (performance of the contract);
• protect the service against abuse and bots, and follow its errors (legitimate interest);
• tell a guest when the album is ready (separate consent, which can be withdrawn at any time);
• measure the site’s audience, only if you accept it in the cookie banner (consent);
• meet our accounting and legal obligations (legal obligation).

We use providers that process data on our behalf:

• Supabase: database and authentication;
• Cloudflare: storage of photos and videos (R2) and anti-bot check (Turnstile);
• Vercel: hosting of the site;
• Stripe: payments;
• Resend: sending e-mails;
• Upstash: limiting the number of requests;
• Sentry: error tracking;
• Google: sign-in with Google, if you choose it;
• PostHog: audience measurement, after your consent.

We aim to host data in the European Union. Some providers (Stripe, Google, Vercel, Sentry) may process data outside the Union; such transfers are covered by standard contractual clauses or an adequacy decision. [To be completed before opening: exact region of each provider, see the record of processing activities.]

We keep data:

• photos, videos, guests and settings of an event: according to the plan (30 days after the event on the free plan, 12 months on the Event plan), then permanent deletion within seven days;
• e-mail addresses left by guests to be notified: erased when the event expires;
• organiser account: as long as the account exists; its deletion takes effect seven days after the request;
• purchases: for as long as accounting obligations require, even after the event is deleted;
• sign-in token: 1 hour; IP address fingerprint: 15 minutes.

You can ask for access to your data, its correction, its erasure, its portability, the restriction of processing, or object to it, and withdraw a consent at any time.

An organiser can export their account data and delete their account from the “My account” page. A guest can delete their photos from “My photos” and remove their e-mail address from the event page. For any other request, write to [To be completed: contact e-mail address].

You can also lodge a complaint with the CNIL (cnil.fr).

Traffic is encrypted (HTTPS). Access to data is limited by security rules at database level, files are served through temporary signed addresses and do not pass through our application servers, and sensitive keys are only used on the server side.

No system is infallible: if a data breach is likely to put you at risk, we will tell you and the competent authority, as the law requires.

This policy may change; the date of the last update is at the top of the page.