Privacy Policy

This policy explains what personal data Disposable Camera ("we", "us") collects when you use this website and the camera/album service (the "Service"), why we collect it, and what rights you have under the GDPR.

1. Who we are

The Service is operated by:

• SiteApp Creators
• Business number: BE 1009.995.969
• Email: siteappcreators@gmail.com

We are the data controller for the account and website data described below. For photos uploaded into an album, the organizer who created that album acts as the data controller towards their own guests, and we act as their data processor (see section 4).

2. What we collect

Organizers (account holders)

• Email address and password, used to create and secure your account.
• Album details you enter: album name and the number of shots per guest.

Guests (people who scan a QR code)

• No account, name or email is required or collected from guests.
• A random, anonymous identifier is stored in a cookie on the guest's device solely to count how many shots that device has used in that album. It cannot be used on its own to identify a person.
• The photos guests take, which are uploaded directly into the organizer's private album. Photos taken at an event may contain personal data (faces, voices if video is ever added, likeness) of guests and other attendees.

We do not collect payment card data ourselves; if paid plans are introduced, payments are handled by a dedicated, PCI-compliant payment processor that never shares full card details with us.

3. Why we process this data

• Performance of a contract — to create and run your account and albums, and to let guests use the camera feature.
• Legitimate interest — to keep the Service secure, prevent abuse of shot limits, and improve reliability.
• Legal obligation — where we must keep certain records (e.g. invoicing) under Belgian law.

4. Who has access to your data

An album and its photos are only visible to the organizer who created that album. Guests cannot see, download, or preview photos after taking them.

We use the following sub-processors to run the Service:

• Supabase — database, authentication and photo storage.
• Vercel — application hosting.

These providers may process data outside the European Economic Area. Where that is the case, transfers are covered by their Standard Contractual Clauses. We do not sell your data or your guests' photos to third parties, and we do not use them for advertising.

5. How long we keep data

• Account data is kept for as long as your account exists.
• Albums and photos are kept until the organizer deletes them or closes their account. Organizers can remove an album, and its photos, at any time.
• The guest cookie expires automatically after 1 year.

6. Your rights

Under the GDPR, you can ask to access, correct, delete, restrict, or receive a copy of your personal data, and you can object to certain processing. Organizers can exercise these rights for their account data by contacting us directly.

If you are a guest and want a photo of yourself removed from an album, please first contact the event organizer, since they control the album. If you cannot reach them, contact us at siteappcreators@gmail.com and we will help.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.gegevensbeschermingsautoriteit.be.

7. Photos of other people and minors

Events often include photos of people other than the organizer, sometimes including minors. Organizers are responsible for having a lawful basis (such as consent or informing attendees at the event) to collect and keep photos of their guests, in the same way they would be if using any other camera at their event.

8. Security

Albums are private by default and only accessible to the signed-in organizer. Traffic to the Service is encrypted (HTTPS), and photos are stored in access- controlled storage rather than public folders.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.

10. Contact

Questions about this policy or your data? Email siteappcreators@gmail.com.