Privacy Policy

Who we are

Ourview is operated by an independent developer. This policy covers the marketing site at ourview.events and the app at app.ourview.events. It describes, in plain language, what actually happens to your data. The rules for using Ourview are in the Terms of Service. Questions go to support@ourview.events.

The short version

• Guests give us a name and nothing else. No account, no email address, no phone number.
• Hosts sign in with a social account or an email link. We never see or store a password.
• Photos are private to the event and are deleted 90 days after the event starts.
• Payments are handled by an outside payment provider. Card details never reach us.
• No ads, no data sales, no tracking cookies on the marketing site.

If you host an event

Your account

You sign in with a social account or with a one-time link we email to you. The link is single use and expires shortly after we send it. We store your name, your email address, the profile image that provider supplies (if you use one), and the time your account was created and last updated. If you sign in with a social account, we also store the tokens that provider issues so the sign-in keeps working; we do not use them to read anything else in that account.

Sessions

When you sign in we record the IP address and browser of the device you signed in from, and keep it for as long as that sign-in stays valid. It lets us tie a sign-in to a device and look into unusual activity if you report a problem. Signing out ends it.

Payments

Paid events are bought once per event on a checkout page run by an outside payment provider, which is the merchant of record and the data controller for your payment details. Its name is the one that appears on your card statement and on your receipt. When you start a checkout we send that provider your name, your email address, the event name, and the price. It collects your card or other payment details on its own page; we never receive them. After a purchase we store the order number and identifier, the amounts charged and refunded, the currency, and the status of the order. Receipts are issued by that provider and are not stored by us.

Email

The only email we send is the sign-in link, delivered through an outside email provider. We do not send newsletters or marketing email.

If you join an event as a guest

You open the private invitation link or scan its QR code and enter a display name. That name is the only personal information we ask for. We do not record your IP address, your browser, or your email, and no account is created.

When you join, your browser quietly remembers that you are a participant of that one event, so your uploads are attributed to your name and you are not asked again. It works for that event only: it cannot be used to recognise you at another event, or anywhere else. Clearing your browsing data resets it — you can rejoin under a new name and will appear as a new participant.

Your display name is shown next to what you upload. The host always sees it. In a shared gallery, other guests who have the invitation link see it too.

Photos

Guests upload photos, and hosts can add a cover image. Files are kept exactly as uploaded, in original quality, in private storage. Nothing there is public: every view or download goes through a link that stops working shortly after it is issued. We do not generate thumbnails or edited copies.

Because files are kept as uploaded, any metadata embedded in them is kept too. Photos from a phone often include the time they were taken, the device model, and, if location services were on, the GPS position. Anyone who can download a file can read that metadata. If you would rather not share it, remove it before uploading (most phones offer this when sharing) or turn off location tagging in your camera settings.

We also store the original file name, its size and type, and when it was uploaded. The host's download uses the original file names.

Who can see them

• The host can see and download every upload at any time, regardless of the gallery setting, and can download the whole event as a ZIP archive.
• In a shared gallery, anyone with the invitation link can browse all uploads once the host's chosen reveal time has passed. Guests do not need to join to browse.
• In a host-only gallery, guests can upload but the collection is visible to the host alone.

An invitation link cannot be guessed. The host can replace it at any time, which immediately stops the old link from working.

How long we keep things

Every event has a fixed storage period: 90 days from the event's start time. After that the invitation stops working and the photos can no longer be viewed or downloaded by anyone, including the host. A cleanup job then deletes the files from storage, normally within a few days of expiry.

If a host deletes an event, the invitation stops working immediately and the files are deleted by the next cleanup run. This cannot be undone. A guest can cancel an upload while it is still in progress; once it has completed, ask the host to delete the event or contact us to remove a specific file.

After the files are gone, we keep the event's records: its settings, guest display names, file names, sizes and timestamps, and the order records for paid events. Order records are kept for accounting. Everything else can be deleted on request (see “Your choices and rights”).

Host accounts are kept until you ask us to delete them. There is no self-service deletion yet; email us from your account address and we will remove the account and its events.

Analytics

ourview.events and the app at app.ourview.events both use an analytics service hosted in the European Union to count page views and to see which steps people complete. In your browser it runs in cookieless mode: no cookie is set and no identifier is stored on your device, so visits cannot be linked to you or to each other across days.

Invitation links and event addresses are stripped from every measurement before it is sent, so a guest link never leaves our app. We never send event names, guest names, email addresses, or file names — only counts, settings, and amounts.

When a host signs in, creates an event, or completes a payment, our server records that milestone against the host's account so we can tell how the product is used over time. Guests are never recorded this way.

Who we share data with

We do not sell personal data and do not share it for advertising. We use a small number of outside providers to run Ourview, and each one receives only what it needs to do its job:

• Hosting and database. Runs the app and the marketing site and stores accounts, events, guest names, and file records. Keeps standard request logs.
• Media storage. Holds the photos themselves, privately.
• Social sign-in. Verifies the account of a host who chooses to sign in that way.
• Email delivery. Sends the one-time sign-in link.
• Payments. Runs the checkout page as merchant of record and issues receipts.
• Analytics. Counts page views and completed steps, without cookies.

Apart from the payment provider, these providers act only on our instructions and may not use your data for their own purposes. The payment provider is the merchant of record, so it is its own data controller for the payment details you give it, under its own privacy policy.

We will name the current providers if you ask us at support@ourview.events.

We will disclose data if a law, court order, or lawful request requires it, and only what is required.

Where data is processed

The app and its database run in the United States. Photos are held on a storage provider's global network. Sign-in email is delivered from the United States. Analytics are processed in the European Union. Payment providers process data under their own terms, which may be outside your country. If you use Ourview from elsewhere, your data is transferred to those locations.

Your choices and rights

Where your local law provides them, you can ask us to access, correct, export, or delete your personal data, or object to how we use it. In practice:

• Hosts can download everything from an event as a ZIP archive, delete an event from its settings, and ask us by email to delete the account.
• Guests can ask the host to delete the event, or email us with the event name and the display name you used and we will remove your uploads or your name.
• Anyone who appears in a photo they did not upload can email us; we will work with the host to remove it.

Hosts should write from the email address on the account so we can verify the request. We answer within 30 days.

Children

Ourview has no age gate. Guests provide only a display name, and the host decides who receives the invitation. If you are a parent or guardian and want a child's contribution or name removed, contact us and we will remove it.

Security

Traffic is encrypted in transit. Photos sit in private storage, reachable only through short-lived links that never outlive the event. Guest credentials and sign-in tokens are never stored in readable form. No system is perfectly secure; if you find a problem, email us and we will respond quickly.

Changes to this policy

When we change how Ourview handles data, we update this page and the date at the top. For a change that reduces your privacy, we will say so here before it takes effect.

Contact

Questions about this page go to support@ourview.events.