Privacy Policy

1. Who we are

Candid Cam ("we", "us", "our") operates candidcam.app , a platform that lets event hosts collect and curate guest photos via QR code. You can reach us at hello@candidcam.app.

2. What we collect

• Hosts: email address, name, and account credentials when you register. Payment details are handled by Stripe, we never store card numbers.
• Guests: optional name and email address entered at upload time, plus any photos or videos you choose to upload.
• Abuse-prevention data: when a guest uploads, we record a hashed (pseudonymized) version of their IP address and a device fingerprint. We never store the raw IP address. This is used solely for rate-limiting, spam and abuse prevention, and content moderation — never for advertising or tracking guests across other sites.
• Usage data: basic analytics such as page views and upload counts to help us improve the product. We do not sell this data.

3. How we use your data

• To operate the service, storing uploads, sending album emails, and managing events.
• To communicate with you about your account or your event.
• To send optional product updates if you opt in (you can unsubscribe at any time).
• To detect and prevent abuse or misuse of the platform.

4. Photo and media storage

Uploaded media is stored securely and is only accessible to the event host and guests they share album links with. Hosts control their event media and can delete individual photos, videos, or the entire event at any time. Event media otherwise remains stored for as long as the host keeps the event or account active — there is no automatic deletion after a fixed period. We do not use guest photos for training, advertising, or any purpose beyond delivering the service.

5. Data sharing

We do not sell your data. We use a small number of trusted third-party services to run the platform, including Supabase (database and storage), Stripe (payments), and Resend (email delivery). Each provider is bound by their own privacy policy and applicable data protection laws.

6. Guest consent

Before adding photos or videos, every guest sees a short notice on the upload screen explaining that their contributions will be reviewed by the event host and may appear in a shared album, that we record limited technical data (an approximate, hashed IP address and a device fingerprint) to prevent abuse, and linking to this Privacy Policy and our Terms of Service. By proceeding to add photos or videos, guests acknowledge this notice. If a guest provides an email address, it is used for album delivery for that event; marketing updates require a separate opt-in. Guests can request deletion of their uploads by contacting the host or emailing us at hello@candidcam.app.

7. Data retention

Host accounts and associated data are retained while the account is active. Event media is retained for as long as the host keeps the event or account — hosts are in control of when their event media is deleted, and it is not automatically removed after a set period. Guests who provide an email for album delivery have that email stored only for the purpose of sending the album. Hashed IP and device fingerprint data collected for abuse prevention is retained only as long as needed for that purpose and is not linked back to a guest's identity. Hosts can request a download link or zip export for event media while it is retained. Guests can contact support to request removal of their contributions; hosts control deletion of their event's media. You may reach us at hello@candidcam.app.

8. Your rights

Depending on where you are located, you may have rights to access, correct, or delete your personal data. To exercise any of these rights, contact us at hello@candidcam.app.

9. Guest profile storage

To save guests from retyping their details at every event, Candid Cam stores the name and email they entered in their own browser's localStorage. This data never leaves the device unless the guest chooses to upload; we do not read it on our servers. To clear it, open your browser settings and remove site data for candidcam.app, or use your browser's private/incognito mode.

10. Report a security issue

If you believe you have found a security vulnerability in Candid Cam, please report it to security@candidcam.com. We acknowledge reports within 2 business days and will keep you informed while we investigate. Please do not disclose the issue publicly until we have had a chance to address it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the site. Continued use of Candid Cam after changes constitutes acceptance of the updated policy.