Last updated: 5 November 2026
Photo Contest lets a host run a photo contest for an event: guests upload photos during the event and vote on their favorites afterward. This page explains what information is collected, from hosts and from guests, and how to have it deleted.
When you create a host account, we store your email address and a securely hashed version of your password (we never store your password itself in readable form). We also record when you agreed to the Terms. When you create an event, we store the event name and the timing you set. We use your email address to sign you in, to send you a confirmation email and password-reset emails when you ask for them, and to answer your questions.
When a guest joins an event, they choose a name and a 4-digit PIN for that event, and agree to the Terms. The PIN is stored as a securely hashed value, never in readable form. Guests are identified only by the name they choose. This app does not ask guests for email addresses, phone numbers, or any other real-world identity information.
Photos guests upload are stored so they can be shown in that event's album and downloaded once results are in. When a photo is uploaded we re-save it on our server: it is turned the right way up, shrunk if it is very large, and all hidden information inside the file, including any location data and camera details, is removed. We also keep a smaller thumbnail copy for faster browsing.
Who can see a photo depends on the stage of the event. While uploads are open, a guest sees only their own photos. During voting, guests with the event's link see all photos without names. Once results are in, names and vote counts are shown. The host can see every photo and who uploaded it at any time.
Guests can report a photo. We store the report (which photo, the reason, an optional note, and the reporting guest's name) so the host can review it. Photos reported by several different guests are hidden until the host has looked at them.
This app does not show ads, does not sell or share your data with third parties for advertising, and does not use analytics or tracking scripts. Fonts and the app's own files are served by the app itself. Photos are stored with our photo storage provider, Cloudflare, and are loaded from Cloudflare's servers, so viewing photos connects your device to Cloudflare, which (like any web server) sees your network address. The outside parties involved are our hosting and database provider, which stores the data described above on our behalf in order to run the service, Cloudflare for the photos, and the email delivery service we use to send the confirmation and password-reset emails.
To protect against password guessing and automated sign-ups, the server briefly counts recent attempts per network address. These counts are kept in memory only, are not saved with your data, and disappear within hours. Our hosting provider may also keep ordinary server logs, which can include network addresses.
Event data (guest lists, photos, likes, reports) is deleted automatically 14 days after the event's results are announced, or 14 days after the host cancels it. Guests and the host are shown the date once results are in, so they can save the photos they want first. It is deleted sooner if the host resets or deletes the event or deletes their account. If an event charged an entry fee, the records of payments and refunds are kept for accounting. Host account data is kept until the host deletes their account.
Hosts can delete their account and all associated data (every event, every photo, every guest list) at any time from within the app, or from the account deletion page without needing the app installed. Deleting a host account is immediate and cannot be undone.
Guests don't have a persistent account to delete. A guest's name and PIN for a specific event are removed if the host removes that name from the event's guest list, or if the host deletes or resets the event. A guest can delete their own photos while uploads are open. To have a photo or your information removed at other times, ask the event's host, or contact us at the address below.
This app is not directed at children under 13 and is not knowingly used to collect information from them.
Questions about this policy or your data can be sent to javaengineering1@gmail.com.