Data security

Encrypted connection

The public website uses HTTPS. Organizer passwords are stored as salted scrypt hashes. Sign-in and gallery cookies are signed and use Secure, HttpOnly and SameSite=Lax in production. This does not encrypt the stored image files.

Access to your photos

Gallery views and collection downloads check access to the respective event. A gallery password is a shared access barrier, not individual access control for each photo. Treat personal guest links like passwords.

Important when sharing: Individual image files are accessible through hard-to-guess direct image addresses. Anyone who knows an address can open the image without entering the password again. Changing the password does not revoke those image addresses or copies already downloaded. Do not use the service as a confidential document store.

Face search on our server installation

Face analysis runs in the application’s own worker without external AI API calls. It helps find photos within the event. Information about data, legal bases and deletion options is available in the privacy policy.

Organizer controls

Organizers can remove photos and guests, change the gallery password or delete the event. Upload only images you are authorized to process and share. Agree on a limited sharing period and delete the gallery afterward. Distribute the link and password only to the intended audience.

Report a security vulnerability

Please report security issues to [email protected]. Describe the affected workflow and URL; do not send other people’s photos, passwords or unnecessary personal data.