Privacy policy

• Host account: your email address and password (stored hashed by Firebase Authentication). You only need an account to host an event — your guests never do.
• Event details: the name, dates, description, hero image and settings you enter, plus the email addresses of any co-hosts you invite.
• Uploads: the photos and videos guests and hosts add, their file sizes and dimensions, the time they were uploaded and — if the event asks for it — the name a guest types in. We don't strip location data out of your files, so a photo may still carry whatever its camera recorded.
• Technical data: cookies and localStorage that keep you signed in and remember your language and theme, an anonymous sign-in identifier given to every guest's browser (no email, no name, no account — it exists only so you can delete photos you uploaded yourself), and, if you allow it, anonymous usage statistics via Google Analytics for Firebase (things like page views, device type and an approximate location from your IP address). No advertising tracking.

To run the service: showing your gallery, streaming the slideshow, building your ZIP export, enforcing plan limits, letting you reset your password, taking payment for an upgrade, protecting the upload endpoint from abuse, and understanding at a high level how the site is used. Nothing else.

We process your data to provide the service you asked for (contract), on the basis of your consent (photos you choose to upload, statistics cookies) and our legitimate interest in running and protecting a working service. You can withdraw consent at any time by deleting the content, turning statistics off below, or deleting your event.

An event is reachable by anyone holding its link — the link is long and unguessable, and galleries are neither listed nor indexed by search engines, but treat it as a shared secret. Depending on the host's settings, guests may also browse everything that's been uploaded, along with the names people typed. Don't upload anything you'd mind the rest of the guest list seeing.

Everything is stored on Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions and App Hosting). Google processes the data as our processor. Data may be stored or processed outside the EU/EEA, and any such transfer relies on the safeguards required by the GDPR (for example the European Commission's Standard Contractual Clauses).

Read about Firebase's privacy practices at firebase.google.com/support/privacy.

Photos and videos are deleted automatically once the event's plan retention window runs out, measured from the end of the event: 10 days on Free, 60 on Premium and 90 on Ultra. The deletion date is shown on the event's plan card. Deleting an event removes its media immediately, and host account details are kept for as long as you have an account. Some data may remain briefly in backups before it's overwritten.

We use essential cookies and localStorage to keep hosts signed in and to remember your language and light/dark choice. If you allow it, Google Analytics for Firebase also sets cookies or identifiers for anonymous usage statistics — you can change that choice any time right here. No advertising cookies.

Besides Google Firebase, a few other services are involved. Some are contacted by your device directly, so they can see your IP address; others we only talk to from our own servers.

Services your device contacts directly (can see your IP address):

• Google Firebase — accounts, database, file storage and hosting — firebase.google.com
• Google Analytics for Firebase — anonymous usage statistics, only with your consent — policies.google.com
• Google reCAPTCHA (via Firebase App Check) — keeps bots away from the upload endpoint — policies.google.com
• Stripe — the payment page when you upgrade an event — stripe.com/privacy

Services we call from the server (your device doesn't contact them):

• Stripe — plan prices shown on the pricing section — stripe.com/privacy

Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, plus the right to data portability. You can do most of it yourself: hosts can delete individual uploads or a whole event from the dashboard, and guests can remove their own uploads from the browser they uploaded them with. Get in touch if you'd like a copy of your data or your account removed.

If you're unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

The data controller for AndraPix is Simon Hillbom, who alone decides why and how your personal data is processed. Note that for the photos guests upload to an event, the host running that event decides what happens to them.

Questions about your privacy? Email us at hej@andrapix.com.