Privacy Policy

1. Who We Are

QR PhotoShare is operated by EvenPath Labs ("we", "us", "our"). We are committed to protecting your privacy and handling your data responsibly.

Contact: contact@qr-photoshare.com

2. What Data We Collect

Event Organizers

• Email address (provided during Paddle checkout)
• Payment information (processed by Paddle, we never see card details)
• Event configuration (name, date, package type)

Event Guests

• Uploaded photos and videos
• No personal data is collected — guests upload without registration

Website Visitors

• Country of origin (via Cloudflare cf-ipcountry header, for language detection and Full Service eligibility)
• Basic analytics (page views, no personal tracking)

3. How We Use Your Data

• Process payments and deliver your QR code and event
• Send transactional emails (event confirmation, reminders, status updates)
• Display the website in your preferred language
• Respond to contact form inquiries

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Storage & Retention

• All data is stored on Cloudflare infrastructure (EU/US regions)
• Photos and videos are automatically deleted 30 days after the event ends
• Event metadata is retained for accounting purposes for up to 12 months
• Contact form messages are retained until resolved, then deleted

5. Third-Party Services

6. Cookies

We use minimal cookies:

• cookies-accepted: Remembers your cookie consent (localStorage)
• Cloudflare: Essential security cookies (cannot be disabled)

We do not use tracking cookies or third-party advertising cookies.

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability

To exercise these rights, email us at contact@qr-photoshare.com.

8. Changes

We may update this policy from time to time. We will notify registered users of significant changes via email.