How do you keep my data safe?

Your photos are stored on servers in London, UK, and are deleted with the event when it expires; in between they are reached only through the event's code, the PIN when one is set, and signed links that expire.

Nothing about an event is public. Guest pages are hidden from search engines, the gallery is never listed, and a link shared in a chat previews only the event's name, never a photo. The host's controls, deleting and downloading, are tied to the browser that created the event or opened the private host link, and the dashboard opens with a one-time code sent to your email, so there is no password to leak.

The files themselves are kept exactly as uploaded, with Supabase in London, which is in Europe but outside the EU, so we do not call it EU hosting. They are served through signed links that stop working within a day, so a copied image address does not stay open, and the PIN cannot be guessed quickly because attempts are slowed down.

When the event expires, 14 days after creation on the free plan or 12 months after the upgrade, the photos, videos, guest-book entries and the ZIP are deleted on the following day, and that cannot be undone. Eventphoto.io is run by a Danish company; the privacy policy says what is kept and for how long, and support@eventphoto.io answers what it does not.