Privacy policy

The controller is FeyaTech UG (haftungsbeschränkt), Pestalozzistraße 25, 22305 Hamburg, Deutschland ("we", "us"), represented by its managing director Feyza Barutcu. Email: hello@eventroll.eu, contact form: https://eventroll.eu/en/contact.

We are not legally required to appoint a data protection officer and have not appointed one.

For the photos inside an event, the host decides who is invited and what happens to the album. Towards guests the host is responsible for the album; we process the photos on the host's behalf to provide the service. If a company uses the service (for example for a corporate event), we conclude a data processing agreement under Art. 28 GDPR on request.

• Account data: your email address and, if you sign in with Google, your name and profile picture. We use them to create your account and to sign you in with a one-time code by email or with Google. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Event data: name, type, date and time of the event and your settings (for example PIN, upload hours, per-phone limit, colour of the invitation card). Legal basis: Art. 6(1)(b) GDPR.
• Payment data: payments are handled by Stripe. We receive the payment status, amount, plan, billing country and invoice details, never your full card number. We keep invoices for the periods required by German commercial and tax law (usually 8 to 10 years). Legal basis: Art. 6(1)(b) and (c) GDPR.
• Order and service emails: order confirmation, invoice, notices about your event (for example "album ready" and reminders before deletion). Legal basis: Art. 6(1)(b) GDPR.
• Protection against abuse at sign-in: Cloudflare Turnstile checks your browser for signs of automated access. Legal basis: legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

Guests do not need an account. When you open an event link and send photos, we process:

• the photos you choose, as the original file and a small preview your browser creates. Original files stay unchanged; embedded metadata (EXIF) such as the time taken, camera model and, if your phone recorded it, the location stay in the file the host downloads. You can switch location tagging off in your camera settings before the event. RAW photos are converted in your browser to the JPEG they contain; only that is uploaded;
• your name, only if you enter one;
• a random device ID in a cookie for this event, so the per-phone limit works and the host can block a phone that uploads unwanted content;
• a salted, one-way hash of your IP address and browser identifier, to detect abuse;
• the Cloudflare Turnstile check and, if the host set one, the PIN you enter (we do not store what you type; wrong attempts are limited);
• the time you confirmed that you accept the terms and may share the photos.

Legal basis: providing the upload to the host you send photos to (Art. 6(1)(b) GDPR) and our legitimate interest in a safe service (Art. 6(1)(f) GDPR).

Who sees your photos: only the host of the event. Other guests never see your photos; albums are not public and are not indexed by search engines.

We do not look at photos. Storage, previews and the automatic check below run without anyone viewing the photos. A person at our company opens a photo only where the law requires it, for example to act on a report of illegal content or a request from the authorities, or where the host explicitly asks us for support with specific photos. Any such access is limited to the photos concerned.

Automatic check for explicit content: a small preview of each photo is checked automatically for explicit sexual content. A flagged photo is not deleted; it is kept out of the host's album and downloads, and the host can show it blurred and decide whether to keep it. The check does not identify people; its result is deleted with the photo. Legal basis: our and the host's legitimate interest in keeping events free of explicit content (Art. 6(1)(f) GDPR).

Reports: if a host reports a photo as illegal, we record when and why, hide the photo from everyone and are told by email with the event and photo reference, never the image. The photo is deleted with the event's other photos at the end of the download window, unless the authorities require us to keep it longer. Where we suspect a crime, in particular child sexual abuse material, we pass the report and the data about the upload to the competent authorities. Legal basis: legal obligations and legitimate interest in acting against illegal content (Art. 6(1)(c) and (f) GDPR).

When you load a page, our hosting provider processes technical data your browser sends (IP address, date and time, page requested, browser and operating system) to deliver and secure the page. These logs are deleted after 30 days at the latest. Legal basis: Art. 6(1)(f) GDPR.

Rate limiting: to prevent abuse we count requests per IP address (for example for uploads, the contact form and PIN entry). For this, the IP address is kept at Upstash for at most one hour and then deleted automatically. Legal basis: Art. 6(1)(f) GDPR.

Contact form: we use your name, email address and message only to answer you and delete them when the matter is settled, at the latest after 12 months. The bot check uses Cloudflare Turnstile. Legal basis: Art. 6(1)(b) and (f) GDPR.

Withdrawal function (https://eventroll.eu/en/withdraw): we use your name, the order number and your email address to match the withdrawal, confirm its receipt and process it. Legal basis: legal obligation (Art. 6(1)(c) GDPR, § 356a BGB). We keep the details as proof for as long as claims under the contract can be made, at most three years.

Analytics and error monitoring: we currently use no analytics or error monitoring services. Should we use PostHog (EU Cloud, without cookies) or Sentry in future, we will update this policy first.

Fonts are served from our own server; no data is sent to Google Fonts.

• Photos and previews: permanently deleted at the end of your plan's download window, counted from the day the event ends (7, 14, 21 or 30 days for Mini, Standard, Pro or VIP; 7 days while no plan is chosen). Hosts can delete single photos, all photos from one phone or the whole event earlier at any time.
• Event settings and guest data (names, device IDs, hashes, consent times): deleted with the photos.
• Account data: while your account exists; deleted within 30 days after you ask, except data we must keep by law (for example invoices).
• Sign-in codes: valid for 10 minutes, stored only as a hash.

We only use providers bound by a data processing agreement who process data on our instructions:

• Vercel Inc. – website hosting (EU region Frankfurt);
• Neon Inc. – database (Frankfurt);
• Cloudflare Inc. – photo storage (R2, EU jurisdiction), bot protection (Turnstile) and email forwarding;
• Stripe Payments Europe Ltd. (Ireland) – payments and invoices;
• Resend Inc. – sign-in, order and service emails;
• Upstash Inc. – rate limiting (EU region);
• Sightengine SAS (Paris) – automatic check of previews for explicit content; images are not stored after the check;
• Google Ireland Ltd. – only if you choose "Sign in with Google".
• Google Ireland Ltd. (Gmail) – the mailbox that email to our address is forwarded to (contact form, withdrawals, reports, requests).

Some of these companies are based in the United States. Where data may be transferred there, we rely on the EU-US Data Privacy Framework or the EU Commission's Standard Contractual Clauses.

We do not sell personal data and do not use your photos for advertising or to train AI models.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future.

Write to hello@eventroll.eu. As a guest you can also ask the host directly to delete a photo; please give us the event link so we can find it.

You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work. Our authority is the Hamburg Commissioner for Data Protection and Freedom of Information.

Whether you must provide data: for a host account we need your email address, and for an order the payment details at Stripe; without them we cannot perform the contract. Guests only need to choose photos; the name is optional.

Automated decisions: we make no decisions based solely on automated processing that have legal effects on you (Art. 22 GDPR). The automatic check for explicit content only flags photos; the host decides whether a photo stays.

All connections are encrypted (HTTPS). Photos are kept in private storage and delivered only through short-lived signed links. Access to production systems is limited to the people who need it, protected by two-factor authentication, and is not used to view photos except as described in section 3.

Host accounts are for people aged 18 or over. Guests under 16 should only upload photos with the permission of a parent or guardian.

We update this policy when the service or the law changes. The date at the top shows the current version. We tell hosts about significant changes by email.