The photos worth keeping are on other people’s phones

What we believe, and built

Guests never make an account

The single biggest reason photo collection fails is that people will not install an app or fill in a form to give you something. So there is no app, no login and no password anywhere near the guest experience. A camera pointed at a printed code, then one button.

Original files, not copies of copies

Photos and video are stored exactly as they left the phone and come back byte-identical. We never re-encode an original, which is what makes the download worth having a year later.

Pay once, per event

There is no subscription, nothing recurring and nothing to cancel. What a plan buys is time: an upload window and a storage period, both measured from your event date rather than from the day you paid, so booking early never costs you anything.

An album is never a public web page

Event pages are excluded from search engines in four independent ways, and no event URL appears in our sitemap. Possession of the link is the whole permission model, which is exactly why the link must never leak into an index.

The guest who took the photo can remove it

Guests can delete their own uploads by default. The person best placed to take down a bad photo of themselves is the person holding the phone, and making them email the host instead is how albums end up with things nobody wanted.

Where your files actually live

Uploads go straight from a guest’s phone to object storage; they never pass through our servers. The database records what exists and who may see it. We name every company involved in running this, and what each of them does, in the privacy policy, alongside how long we keep things and how to have them removed.