Privacy policy
Last updated 5 October 2026
DropSnaps lets people share the photos and videos from an event in one place. This policy explains what information we hold, why we hold it, who we share it with and the choices you have. It covers organizers, who create events and sign in, and guests, who open an event's link to look at or share photos.
- We collect only what we need to run your event: an organizer's email address, whatever guests choose to share, and a delivery address if you order printed signs.
- We never sell your information or show adverts, and we use your photos only to run your event.
- Our website and organizers' pages use Google Analytics to count visits. It is never used on an event's guest page, wall or slideshow.
- Photos and videos are stored in Western Europe and are deleted when the organizer deletes them or the event's plan ends.
- You can ask to see, correct or delete your information at any time: hello@dropsnaps.com.
1. Who we are
DropSnaps (dropsnaps.com) is run by Redouble Digital Limited. You can reach us at hello@dropsnaps.com.
We are the controller of the personal information described here, which means we are responsible for looking after it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
2. What we collect
If you organize an event
- Your email address, to sign you in with one-time codes and to email you about your events.
- The events you create: name, date, welcome message, cover photo, PIN, moment tags and settings.
- If you buy a plan or extra time: what you bought, the amount, the date and Stripe's reference for the payment. Card details go straight to Stripe; we never see or store them.
- If you order printed signs: the design and wording you choose, and the delivery name, address and phone number you give on the payment page.
- If you connect Google Drive or Dropbox for backups: the access that lets us save your event's photos there (stored encrypted) and that account's email address, so you can see which account is connected.
If you are a guest
- The photos, videos and messages you share, with any captions, comments, reactions and moment tags you add.
- Your name, if you give one. Organizers can ask guests for a name before they share.
- If you report something: the reason you chose, anything you write, your email address if you give it (only to tell you what we decide), a copy of what you reported (so the record still makes sense after it has been removed), and a one-way scrambled form of your IP address, so that one person can't hide lots of photos. The scrambled address is deleted after 30 days.
- A random guest ID kept in a cookie on your device. It doesn't say who you are; it lets you see, tag and delete what you have shared from that device, and keeps your photos together under your name.
Everyone
The technical information our systems handle when you use the site: your IP address, browser and device type, and which pages and files were requested and when. We use it to keep the service running and secure, for example to limit how fast one connection can upload, to stop people guessing event PINs, and to check that sign-ins and reports aren't coming from bots (using Cloudflare Turnstile).
Details inside photos and videos
Originals are stored exactly as they were uploaded, so they keep any details the phone or camera saved in the file, such as the date and time, the camera model and, if location was switched on for the camera, where the photo or video was taken. Anyone who can download originals can read those details: the organizer, and guests if the organizer has turned on guest downloads. The web-sized copies of photos shown on the wall and slideshow don't carry them.
3. How we use it, and why we're allowed to
- To run DropSnaps for you and your event: accounts, storing and showing photos to the event, converting videos so they play on every device, downloads and the backups an organizer asks for. We rely on our contract with you and, for guests, our legitimate interest in providing the service the organizer set up.
- To email organizers about their events: sign-in codes, a note the morning after the event that the photos are ready, and a reminder two weeks before anything is removed. We don't send marketing emails.
- To take payments and keep accounts, as our contract with you and UK tax law require.
- To keep people safe: preventing abuse and bots, dealing with reports, removing illegal content and meeting our legal duties. We rely on our legitimate interests and our legal obligations.
- To see how people find and use our website, with Google Analytics: which pages are visited, how visitors arrived (for example from a search or an advert), their type of device and browser and their rough location. It runs on our website, the demo and organizers' pages, never on an event's guest page, wall or slideshow. We rely on our legitimate interest in improving the site.
We don't sell or rent personal information, we don't show adverts, and we don't use your photos, videos or messages to train AI or to promote DropSnaps without asking you first.
4. Who can see what's shared at an event
- Anyone with the event's link, QR code or 6-letter code can open it, see the wall and slideshow, and share photos, unless the organizer has added a PIN. If the organizer turns on "Findable by name", people can also find the event by searching for its name on our home page.
- The organizer can see everything shared to their event, approve it before it's shown, hide or delete it, and download the originals. They can let guests download originals too.
- Reports go only to us. The person who shared what you reported isn't told who reported it.
- Please share only photos and videos you're happy for everyone at the event to see.
5. Services we use
We use a small number of providers. Each is bound by contract to protect your information and to use it only to provide their service to us.
- Cloudflare runs our website and database, stores photos and videos (in Western Europe), converts videos, sends our emails and protects the site, including the bot check on the sign-in page.
- Stripe handles payments. Stripe is also responsible in its own right for payment information it needs for fraud prevention and its legal duties; see stripe.com/gb/privacy.
- Google (Google Drive) and Dropbox, only if an organizer connects one for backups.
- Google Fonts supplies the typefaces for the printed sign designs. When an organizer's page shows a sign design, the browser fetches them from Google, which sees the IP address; see Google's privacy policy.
- Google Analytics counts visits to our website, the demo and organizers' pages (see "Cookies" below). Google sees your IP address but doesn't keep it in our reports; see Google's privacy policy.
- Our printing partners, who print and post the signs you order. They receive the design and your delivery name, address and phone number, and use them only for your order.
Some of these companies are based in the United States. When information leaves the UK it is protected by the UK–US data bridge or by contract terms approved by the Information Commissioner's Office (ICO).
We may also share information when the law requires it, for example with the police when illegal content is reported, or to protect someone's safety.
6. Google Drive and Dropbox backups
If an organizer connects Google Drive, we ask only for permission to create and manage the files DropSnaps saves in their Drive, and to see the account's email address. We use that access only to copy the event's approved photos and videos into a folder there. We don't open any other files, we don't share Google user data with anyone, and we don't use it for advertising or to train AI. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Dropbox works the same way: we save the event's approved photos and videos into a folder in the connected account and use the access for nothing else.
An organizer can disconnect a backup at any time in the event's settings, or from their Google or Dropbox account.
7. How long we keep it
- Photos, videos, messages, comments and reactions: until the organizer or the guest who shared them deletes them, or until the event's plan ends: 30 days after the event on the Free plan, and 12 months on Standard and Premium after the event date (or after buying, if that's later), plus any extra time the organizer buys. We email the organizer two weeks before. After that everything shared to the event, including guests' names, is permanently deleted; we keep the event's own details (name, date, plan and settings).
- Deleted photos and videos are removed from our storage straight away and can't be recovered. Our database keeps a rolling 30-day history for recovering from faults, so deleted names, captions and messages leave it completely after 30 days.
- Organizer accounts: until you ask us to close your account. Sign-ins last 30 days; sign-in codes are deleted after 2 days.
- Payment and order records, including delivery details for printed signs: 6 years, as UK tax law requires.
- Reports: 12 months, then deleted. Anything we have to report to the National Crime Agency is kept as the law requires.
- Security records, such as a one-way scrambled form of the IP address behind wrong PIN attempts: 1 day. Technical logs held by Cloudflare: a few days.
- Website statistics (Google Analytics): up to 14 months.
9. Your rights
You can ask for a copy of your information, ask us to correct or delete it, ask us to restrict or stop using it, and ask for it in a portable format. Email hello@dropsnaps.com and we'll reply within one month.
- Guests can delete anything they shared from "Your uploads" on the event page, on the device they used. If that isn't possible, ask the organizer or email us with the event's code and a description of the photo.
- If you appear in a photo someone else shared and want it removed, ask the organizer or email us.
- Organizers can delete an event, or anything in it, at any time. To close your account, email us from the address you sign in with.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.
10. Children
You must be 18 or over to create an account or buy a plan. Guests under 13 should only share photos with a parent's or guardian's permission. Events often include children, so please think before sharing photos of other people's children. A parent can ask the organizer or us to remove a photo of their child.
11. Changes to this policy
If we change this policy we'll update the date at the top, and if the change is significant we'll email organizers. See also our Terms of use.