Privacy Policy

This privacy policy explains how MomentsGather collects, uses, and protects your personal information when you use our service.

Information we collect

We collect the following types of information:

• Account information: Email address, username, display name, and password (encrypted)
• Content: Photos and images you upload to gatherings
• Usage data: Information about how you use our service, including gathering names and dates
• Technical data: IP address, browser type, device information, and cookies

How we use your information

• To provide and maintain our service
• To communicate with you about your account
• To improve and optimize our service
• To protect against unauthorized access and abuse

Cookies

We use cookies to enhance your experience:

• Necessary cookies: Required for authentication and basic functionality
• Preference cookies: Store your language preference and settings
• Analytics cookies: Help us understand how you use our service (only with your consent)

Data storage and location

Your data is stored securely on Hetzner servers located in Germany. This means your data is subject to German and European data protection laws (GDPR). We implement appropriate technical and organizational measures to protect your data.

Data deletion

When you delete an image or photo from a gathering, it is permanently and immediately deleted from our servers. We do not keep backups of deleted content. Once deleted, the data cannot be recovered. If you delete your account, all your personal data and associated content will be permanently deleted within 30 days.

Guest user data

When you participate in a gathering without creating an account (as a guest), the following applies:

• Your session is tracked via a cookie to identify your uploads and allow you to manage your photos
• Guest sessions are automatically removed after 90 days of inactivity
• When your guest session is removed, your uploaded photos remain in the gathering but are no longer linked to you (shown as uploaded by a "Former member")
• We recommend creating a free account to maintain permanent control over your uploaded photos and access them across all your devices

Any activity (uploading photos, viewing the gallery, or deleting photos) resets the 90-day inactivity timer.

Third-party data processors

To provide our service, we work with trusted third-party service providers who process your data on our behalf. These processors are carefully selected and contractually bound to protect your data in accordance with GDPR:

• Google (Authentication): If you choose to sign in with Google, we use Google's OAuth authentication service. Google processes your email address and basic profile information. By using Google Sign-In, you agree to Google's privacy policy. Google Privacy Policy
• Stripe (Payment Processing): All payment transactions are securely processed by Stripe, a PCI-DSS compliant payment processor. Stripe handles your payment card information and billing details. We never store your complete card details on our servers. Stripe processes data in accordance with their privacy policy. Stripe Privacy Policy
• Mailgun (Email Service): We use Mailgun to send transactional emails such as account verification, password resets, and important account notifications. Mailgun processes your email address for delivery purposes only and handles data according to their privacy policy. Mailgun Privacy Policy

All our third-party processors are GDPR compliant and have appropriate data processing agreements in place.

Data sharing

We do not sell, trade, or rent your personal information to third parties. Beyond the trusted service providers listed above (Google, Stripe, Mailgun), we only share information when required by law or to protect our rights and users.

Your rights

Under GDPR and other privacy laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to data processing

Data security

We use industry-standard security measures including encrypted passwords, secure connections (HTTPS), and regular security updates. However, no method of transmission over the internet is 100% secure.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact us