Privacy Policy

Effective 2026-10-08

Who we are

Bradley Hicks, a sole proprietorship in Ontario, Canada, operates this service. For the purposes of Canadian privacy law we are the organisation responsible for the personal information described below.

What we collect

From hosts: your email address (including the address entered with a purchase at checkout), and the event details you enter (event name, date, timezone, language, optional guest password and plan).
From guests: a display name if you type one, the photos and videos you choose to upload, any written note you leave in the album's guestbook, and any voice message you record there.
Automatically: a random browser identifier, cookies and browser storage described below, and basic server logs needed to run the service.

Hosts have accounts linked to their email address and sign in using an emailed link, without an account password. Guests do not need an account; a host may set an optional password for guest access to an album. We do not ask for phone numbers or payment card details. Cards are handled entirely by Paddle, our payment provider, and never reach our systems. We retain purchase information such as the buyer's email, plan, amount, currency, payment status and provider references for billing and accounting.

The identifier your browser keeps

A random identifier generated in the browser and kept in local storage (ep_device) supports reactions, guestbook contributions and request limits. It is not a name, email address or account. The same identifier is used across albums on this site, not to track you across other sites. Local storage also remembers a guest display name (ep_guestname), host checklist choices for an album and whether a homepage prompt was dismissed. These values are not automatically removed from your browser when an album expires or is deleted. They remain until browser site data is cleared, subject to browser storage settings.

Where your information is stored

Photos and videos are stored on Cloudflare R2 object storage, which is not located in Canada. Cloudflare operates a global network and may store and process your information in the United States and other countries.

This means your personal information may be transferred to, stored in, and processed in a foreign jurisdiction, where it may be accessible to foreign authorities under the laws of that jurisdiction. By using the service you consent to that transfer. We remain accountable for your information as described in this policy.

Who else processes it

We use these providers. Each only receives what it needs to do its job.

Cloudflare (R2 object storage and content delivery). Stores the photos and videos.
Paddle (payments). Acts as merchant of record and handles billing, tax, and card data. Paddle is the seller of record for album purchases.
Our email provider. Sends sign-in links and notifications, and therefore processes email addresses.

We do not sell your personal information, and we do not share it for advertising.

We use Cloudflare Turnstile to protect sign-in from abuse. Cloudflare processes network and browser signals for this security check.

How long we keep it

The album's plan determines its retention period, separately from the window for adding content. Both run from the later of album creation and midnight on the event date in the event's timezone, or from creation without a valid event date. Older albums without a saved timezone use the server's local timezone. When retention ends, the automatic cleanup job removes photos, videos, guestbook notes and voice messages. Hosts can also delete an event at any time: it is hidden at once, then its contents are held temporarily before cleanup. Files are normally removed from our storage within a few days after they become due for scheduled cleanup, rather than at the moment the host deletes the event. Failed storage deletions are retried by later cleanup runs; this is not a guaranteed deletion deadline.

Purging an album clears its title and deletes its photo and guestbook records, but does not delete every record about it. An archived event record remains, including event dates, plan information and account links, together with payment records needed for billing and accounting, including amounts, currencies, payment status and provider references. Deleting an album does not delete the host's email-linked account or these records.

Cookies

We use functional cookies:

ep_guest authorizes guest access to a password-protected album, so guests do not retype its password on every upload. It does not store the password itself.
ep_host keeps a host signed in to their account.
__Host-rp-purchase keeps an anonymous purchase associated with the browser that paid, so setup can continue without an account sign-in. It grants access to that purchase only and expires automatically.
rp_lang and rp_currency remember an explicitly selected language and display currency.

We use no advertising or analytics cookies.

Your rights

You may ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Contact us at [email protected].

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

About photos of other people

The host creates the album and invites guests. The host is responsible for making sure guests know their photos will be uploaded and shared with other guests, and for obtaining any consent that is required. We provide the tooling and the retention controls.

Children

This service is not intended for children to use on their own. Albums are created by adults.

Changes

If this policy changes materially, we will update the effective date above and notify hosts by email.

Contact

Bradley Hicks, sole proprietor, operating as RevelPics
Ontario, Canada
[email protected]

Payments are processed by Paddle, the merchant of record.