Privacy Policy
Last updated: April 5, 2026
Photos By Snappy, LLC ("Company", "we", "us", or "our") operates the SnappyShare service ("Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
1. Information We Collect
a) Information You Provide
- Account information: first name, middle name, last name, and email address when you register.
- Authentication data: hashed password (if using email login) or OAuth tokens (if using Google or Apple Sign-In).
- Event content: photos, videos, and comments you upload or post within events.
- Payment information: billing details when subscribing to a paid plan (processed by third-party payment processors — we do not store credit card numbers).
b) Information Collected Automatically
- Session identifiers: we use URL-based session tokens (not cookies) to maintain your login session.
- Server logs: IP address, browser type, and request timestamps for security and troubleshooting.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To authenticate your identity and manage your account.
- To deliver photos, videos, and comments to event participants.
- To process subscription payments.
- To send transactional emails (verification, password reset, event notifications).
- To enforce our Terms of Service and protect against misuse.
3. What We Do NOT Do
- We do not sell your personal information to third parties.
- We do not display advertising.
- We do not share your photos or videos with anyone outside of approved event participants.
- We do not use tracking cookies or third-party analytics trackers.
4. Data Sharing
We share your data only in the following circumstances:
- With event participants: your name and uploaded content are visible to other approved members of events you join.
- With service providers: payment processors and hosting providers that help us operate the Service, bound by confidentiality agreements.
- When required by law: we may disclose information in response to lawful requests by public authorities, court orders, or legal processes.
5. Data Security
We protect your data using industry-standard measures including:
- Bcrypt password hashing.
- CSRF token protection on all forms.
- Account lockout after repeated failed login attempts.
- Prepared statements for all database queries to prevent injection.
- HTTPS for data in transit (when configured on the server).
While we take reasonable measures to protect your data, no system is 100% secure. You are responsible for keeping your password confidential.
6. Data Retention
- Account data is retained as long as your account exists.
- Event content is retained for the duration of the event and for a reasonable period afterward (as defined by the event owner's subscription).
- Server logs are retained for up to 90 days.
You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights
Depending on your jurisdiction you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Request deletion of your personal data.
- Object to or restrict certain processing of your data.
- Receive your data in a portable format.
To exercise any of these rights, contact us via our contact page.
8. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance.
10. Contact
Questions or concerns about this Privacy Policy may be directed to our contact page or emailed to support@photosbysnappy.com.