Privacy Policy

• Your email address and password, or your Google account identity if you sign in with Google. Passwords are hashed; we never see the original.
• Your display name and, if you sign in with Google, your profile photo.
• The events you create: title, date, access code, appearance settings, and any logo or banner you upload.

Guests never create an account and are never asked for an email address.

• The photos you upload, including any metadata the camera embedded in them, such as the time the photo was taken and possibly the location.
• A display name, if the host chose to require one. It is stored with your photos so the host can tell who shared what.
• A random session identifier kept in your browser, used only to remember your name and, in disposable camera mode, how many shots you have left.

When someone enters an incorrect event code, we record a one-way cryptographic fingerprint of their IP address so we can stop automated guessing. The address itself is not stored and cannot be recovered from the fingerprint. These records are discarded once the event code is entered correctly, and otherwise expire within a short window.

Our hosting provider keeps standard server logs, including IP addresses, for a limited period for security and reliability purposes.

We use two cookies, both strictly necessary for the service to function, and neither used for advertising or cross-site tracking:

• A session cookie that keeps a host signed in.
• A short-lived cookie that remembers where to send a host after Google sign-in. It expires within ten minutes.

We do not run analytics, advertising, or third-party tracking scripts.

Event galleries are private. Photos are stored in a non-public bucket and are served only through short-lived signed links generated after someone proves they have the event's access code, or after the host signs in. Guests can only reach the event whose code they hold.

The host of an event can see, download, and delete every photo shared with that event. If you upload a photo, the host has it.

• An event's upload window closes automatically 24 hours after the host publishes it, or earlier if the host ends it.
• Photos stay until the host deletes them. Deleting a single photo or the whole event removes both the database record and the underlying file from storage.
• Host accounts persist until you ask us to delete them.

If you are a host, you can delete any individual photo or the entire event at any time from the event's settings. Deleting an event permanently removes every photo guests shared with it.

If you are a guest and want a photo removed, ask the host — they can delete it immediately. You can also write to us at privacy@havenpic.com.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to its processing. Write to the address above and we will respond within the period required by applicable law. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We rely on a small number of providers to run HavenPic. They process data on our behalf and are not permitted to use it for their own purposes.

• Supabase — Database, authentication, and photo storage.
• Vercel — Application hosting and content delivery.
• Google — Optional sign-in for hosts who choose Google.

HavenPic is not directed at children under 13, and hosts are responsible for the guests they invite. If you believe a child's photo has been uploaded without appropriate consent, contact us and we will remove it.

If this policy changes in a way that materially affects you, we will update the date at the top of this page and, where required, notify hosts by email. Questions go to privacy@havenpic.com.