Privacy Policy

EvenQR is a photo-sharing platform that allows event organizers to collect photos and videos from their guests. This privacy policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

Account data: When you register, we collect your name, email address, and a hashed version of your password. We never store your password in plain text.

Event data: Event titles, subtitles, dates, and unique slugs you create.

Photos & videos: Files uploaded by you or your guests are stored securely. Guests can upload without creating an account.

Cookies: We use only essential cookies: a session cookie to keep you signed in and a language preference cookie. We do not use tracking, analytics, or advertising cookies.

We use your data solely to provide the service: creating events, storing and displaying photos, authenticating your account, and remembering your language preference. We do not sell, share, or transfer your data to third parties for marketing purposes.

We process your data based on:
• Contract performance: To provide the service you signed up for.
• Legitimate interest: To maintain security and improve the platform.
• Consent: For optional features like email notifications.

Your data is stored on Cloudflare's infrastructure (Workers, D1 database, and R2 storage). Passwords are hashed using PBKDF2 with SHA-256. All connections are encrypted via HTTPS. We retain your data for as long as your account is active.

Under GDPR, you have the right to:
• Access your personal data
• Rectify inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Withdraw consent at any time

To exercise these rights, contact us through the platform or delete your account directly from the dashboard.

Account data is kept while your account is active. When you delete an event, all associated photos are permanently removed from storage. When you delete your account, all your data is permanently erased.

We use the following third-party services:
• Cloudflare: Hosting, database, and file storage (data processing agreement in place).
• Google Fonts: Font delivery (no personal data is collected).

We do not use any analytics, advertising, or social media tracking services.

We may update this privacy policy from time to time. We will notify registered users of significant changes via email or a notice on the platform.

If you have questions about this privacy policy or your data, please contact us through the platform.