English · 한국어

Privacy Policy

GalaSnap — Wedding Guest Photos · Effective date: October 16, 2026

The short version: GalaSnap stores the photos and videos your guests upload only for the duration of your event album, then deletes them automatically. There are no user accounts, no advertising, no analytics tracking, and no facial recognition. The event host stays in control and can delete the album — including every photo and video — at any time.

How GalaSnap works

An event host creates an event album in the GalaSnap app and shares a QR (Quick Response) code with guests. Guests open a web page in their browser — no app install, no sign-up — and upload photos and videos to the album. The host can also add photos and videos from the GalaSnap app. Uploaded photos and videos are stored on GalaSnap's cloud storage (provided by Cloudflare, Inc.) so the host — and anyone the host sends a view-only gallery link — can view and download them during the album period. The QR code guests scan is for uploading only; it does not open the album.

Photos and videos uploaded to an album

Photos and videos uploaded to an album are stored on our servers only for that album's retention period: 14 days on the free plan; with a Party Pass, uploads are open from 3 days before to 3 days after the event date and the album is deleted 14 days after uploads close; with a Starter Event Pass until 18 months after the event date, and with a Pro Event Pass until 36 months after the event date. Photos and videos added before the event are kept until the same day. If no event date is set, the period counts from the purchase. Videos are stored as uploaded, including their sound. When the period ends, the photos and videos are deleted automatically from our storage. The host can also delete individual photos and videos or the entire event — including all of its photos and videos — at any time from the app, and that deletion takes effect on our servers.

Albums are not public and cannot be found by search. A gallery can only be opened by the host or by someone the host sent a view-only gallery link — the link uses a long random token that cannot be guessed, and the host can replace it at any time. We do not run facial recognition or any content analysis on photos or videos, and we never use uploaded photos or videos for advertising, model training, or any purpose other than showing them in the album they were uploaded to.

Guest nicknames

Guests may optionally enter a display nickname when uploading, so photos can show who shared them. The nickname is stored with the photo, is visible only inside that album, and is deleted together with the album's photos. Guests do not create accounts and we do not ask for email addresses, phone numbers, or any other contact details.

Event hosts

Hosts do not create accounts either. The key that proves ownership of an event is generated on the host's device and stored in the device keychain (synced through the host's own iCloud Keychain), along with a one-time recovery code shown in the app. We do not receive the host's name, email address, or contacts.

Roles under GDPR

For guests in the European Union, the GDPR (General Data Protection Regulation) applies as follows: the event host who creates the album and invites guests acts as the data controller, and GalaSnap acts as a data processor storing photos and videos on the host's behalf. Guests who want a photo or video of themselves removed should contact the event host, who can delete it in the app; you can also contact us at the address below and we will assist.

Who we are

GalaSnap is operated by YS Labs, Yongin-si, Gyeonggi-do, Republic of Korea. For the photos, videos and nicknames uploaded to albums, we act as the host's processor (see below). For the small amount of data we handle to run the service itself — event records, purchase attribution, and abuse prevention — YS Labs is the data controller. Contact: contact@yslabs.dev.

Legal bases (GDPR)

Guest photos, videos and nicknames are processed on the host's instructions, on the legal basis the host relies on. Our own processing relies on performing the service you asked for (GDPR Art. 6(1)(b)) — storing the album, attributing a purchase to the right event — and on our legitimate interest in keeping the service secure and free of abuse (Art. 6(1)(f)), such as the bot check on the upload page.

What we do not collect

GalaSnap has no analytics or tracking SDKs (Software Development Kits), no advertising, no facial recognition, and no access to your contacts or precise location. We do not collect usage or diagnostic data, and we do not store visitors' IP addresses. The only records we keep are the ones the service needs to run — an album's photo count and storage usage. To keep bots out, the guest upload page uses Cloudflare Turnstile, a bot check that evaluates technical signals such as IP address and browser characteristics on Cloudflare's side; we only receive a pass or fail result. Our hosting provider (Cloudflare) produces automatic request logs that expire within days; we use them only to keep the service running and never to identify, profile, or track anyone.

Purchases

Event Passes are one-time purchases processed by Apple through the App Store (iPhone) or by Google through Google Play (Android); we never see your payment details. To attribute a purchase to the right event, the app uses RevenueCat, a purchase-management service. RevenueCat receives an anonymous app-generated identifier and the store's purchase receipt information — not your name, email address, or photos. See the RevenueCat privacy policy for details.

Where data is processed

We are based in the Republic of Korea, which the European Commission recognizes as providing an adequate level of data protection. Our service providers Cloudflare and RevenueCat may process data in other countries, including the United States; for such transfers we rely on the safeguards these providers offer, such as the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.

Data retention and deletion

In summary: photos, videos and nicknames live on our servers for the album's plan period and are deleted automatically when it ends; the host can delete any photo or video or the whole event earlier at any time; and deleting an event removes its photos and videos from our storage. Photos and videos that the host or guests downloaded to their own devices are managed by them.

Your rights

If you are in the European Economic Area, the UK, or another place with similar laws, you can ask to access, correct, or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. For a photo or video in an album, the quickest route is the event host, who can delete it in the app; you can also write to us with the event code and we will help or pass the request to the host. We reply within one month. You also have the right to complain to your local data protection authority.

Reporting content

If you believe an album contains illegal content, email contact@yslabs.dev with the event code and a short description. We review every report and can remove content or disable an album.

Children's privacy

GalaSnap is made for event hosts and their guests and is not directed at children. We do not knowingly collect personal information from children; if you believe a child's photo or video was uploaded to an album and should be removed, contact the event host or reach us at the address below.

Changes to this policy

If we change how GalaSnap handles data, we will update this page and revise the effective date above before the change takes effect.

Contact

Questions about privacy or the app: contact@yslabs.dev