Privacy Policy
Last updated: 12 July 2026. This policy is provided in good faith and is pending review by legal counsel before public launch.
The short version
BucketPic lets event hosts collect photos and videos from their guests in one shared gallery. Guests don't need an account. The event host — not BucketPic — decides who can see the gallery and, when approval is switched on, reviews photos before other guests see them. We strip location metadata from most photos before upload (see section 3), we never sell personal data, and we delete each gallery automatically when the host's hosting period ends.
1. Who we are
BucketPic (“BucketPic”, “we”, “us”) operates the BucketPic service. For any privacy question, contact us at privacy@bucketpic.com.
2. Who controls your data (hosts vs. BucketPic)
Understanding this helps explain your rights:
- For guest photos and videos in an event gallery, the event hostis the data controller — they organise the event, decide the gallery's visibility, and moderate content. BucketPic acts as a service provider (processor) that stores and displays that content on the host's behalf.
- For host account and billing data, BucketPic is the controller.
If you are a guest and want content about you removed, you can delete your own uploads from the event page at any time, and you can also ask the host directly.
3. What we collect
From guests (no account needed):
- The photos and videos you upload to an event gallery.
- A display name, if you choose to enter one.
- An anonymous device token (stored in a cookie) so you can manage and delete your own uploads without signing up.
- Basic technical and log data (e.g. IP address, browser type, timestamps) used for security, abuse prevention, and reliability.
For standard photos (e.g. JPEG/PNG), we strip GPS and other EXIF location metadata on your device before they are uploaded, so we do not receive the location where the photo was taken. Videos and some photo formats (e.g. HEIC) are uploaded as-is and may still contain location metadata; if that matters to you, turn off location tagging in your camera settings before recording.
From hosts (account holders):
- Your email address and a password (stored only as a secure hash by our authentication provider).
- Event details you create (event name, date, settings, co-hosts).
- Billing records. Payments are handled by our payment processor (Polar) as merchant of record — we do not receive or store your full card number.
4. How we use your data
- To run event galleries — store, display, and let hosts download and manage content.
- To let guests manage and delete their own uploads.
- To screen content for illegal or harmful material (see section 6).
- To process payments, prevent abuse, provide support, and keep the service secure and reliable.
- To send service and account emails (e.g. sign-in links, receipts, expiry reminders).
5. Legal bases (where applicable, e.g. UK/EU GDPR)
We rely on: performance of a contract (to provide the service you or the host requested); legitimate interests (security, abuse prevention, improving the service); legal obligation (e.g. detecting and reporting child sexual abuse material); and consent where required. Where BucketPic acts as processor for guest content, the host is responsible for establishing the lawful basis to collect and display that content.
6. Content moderation & safety
Event hosts are in control of what appears in their gallery. When a host turns on approval, photos and videos are held for the host to review and are not visible to other guests until the host approves them. Hosts can also hide or remove any item, block a contributor, and make a gallery private so only they can see it.
On top of host moderation, we apply automated safeguards as a backstop: uploads are screened by automated content moderation, and known child sexual abuse material (CSAM) is detected at our storage/edge layer. Illegal content is removed and reported to the relevant authorities as required by law. Videos are not analysed by automated image moderation and instead rely on host review. Automated screening is not perfect and does not replace the host's responsibility for their event.
7. Facial recognition
We do not use facial recognition, and we do not create biometric templates or use faces to identify people.
8. Who we share data with (service providers)
We don't sell personal data. We share data only with providers that help us run the service, under contract and only as needed:
- Cloud database & authentication (Supabase) — stores account data, event records, and manages host sign-in.
- Media storage (Cloudflare R2 / Cloudflare) — stores uploaded photos and videos and provides edge safety features including CSAM detection.
- Payments (Polar, as merchant of record) — processes payments and handles card data directly.
- Automated content moderation (OpenAI moderation) — screens images for prohibited content.
- Email delivery (Maileroo) — sends transactional emails such as sign-in links and receipts.
- Hosting/infrastructure (Vercel) — serves the application.
We may also disclose data if required by law, to enforce our terms, or to protect the rights and safety of users and the public.
9. International transfers
Our providers may process data in countries other than yours, including the United States. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
10. How long we keep data
- Event galleries are deleted automatically after the host's hosting period ends (this ranges from about 7 days on the free tier up to 12 months on higher plans).
- Hidden or rejected content is deleted within approximately 24 hours.
- Content you delete yourself is removed promptly.
- Host account and billing records are kept while your account is active and as needed to meet legal, tax, and accounting obligations.
- Residual copies may persist briefly in encrypted backups before being overwritten.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. Guests can delete their own uploads directly from the event page. To make any other request, contact privacy@bucketpic.com. You also have the right to complain to your local data protection authority.
12. Children
BucketPic is intended for adults organising and attending events and is not directed to children. Do not use BucketPic if you are under 16. Hosts are responsible for obtaining any consents needed when children may appear in event photos. If you believe a child has provided us personal data, contact us and we will delete it.
13. Security
We use encryption in transit, access controls, and reputable infrastructure providers to protect data. No system is perfectly secure, but we work to protect your information and to respond promptly to any incident.
14. Changes to this policy
We may update this policy from time to time. We'll change the “last updated” date above and, for material changes, provide additional notice where appropriate.
15. Contact
Questions or requests: privacy@bucketpic.com.
See also our Terms of Service and Cookie Notice.