GalaSnap Privacy Policy

Effective date: October 25, 2026 Operator: YS Labs, Yongin-si, Gyeonggi-do, South Korea · contact@yslabs.dev Service: GalaSnap — Wedding Guest Photos (App Store and Google Play apps, and the guest upload web page opened from an event's QR code)

The short version

GalaSnap collects the photos and videos guests upload to an event album, keeps them only for that album's plan period, then deletes them automatically. There are no user accounts, no advertising, no analytics or tracking SDKs, and no facial recognition. We do not sell personal information or share it for advertising. The event host controls the album and can delete any photo, video or the whole album at any time.

1. How GalaSnap works

An event host creates an album in the GalaSnap app and shares its QR code. Guests open a web page in their browser — no app, no sign-up — and upload photos and videos. The host can also add photos and videos from the app. Albums are stored on GalaSnap's cloud storage (provided by Cloudflare, Inc.). - Who can see an album: the host, and anyone the host sends a view-only gallery link (a long random link the host can replace at any time). The QR code guests scan is for uploading. - Guest view (paid events, GalaSnap 1.3 and later): if the host turns it on, guests who open the event's QR page can also browse the album — except photos and videos the host has hidden — and tap a heart (♥). Guest view has no download button. The host can turn it off at any time. - Albums are not public and cannot be found by search.

2. What we collect and why

Apart from optional nicknames and what you send us when you email us, we do not collect names, email addresses, phone numbers, contacts, precise location or advertising identifiers. Apart from the short-lived hosting logs and the bot check described in section 4, we do not collect usage or diagnostic data. We do not run facial recognition or any content analysis, and we never use uploaded photos or videos for advertising, model training or any purpose other than showing them in their album.

3. On the host's device

• The ownership key is kept in the device's secure storage — the iOS Keychain (which may sync through the host's own iCloud Keychain) or the Android Keystore (excluded from Android backups). The recovery code shown at creation restores an event on another device.
• The app's event list and settings are stored on the device. Expiry reminders are local notifications scheduled on the device; no push server is involved.
• Permissions: Camera and Microphone (iOS) only when you take a photo or video to add to the album; saving to Photos only when you choose Save; notifications (Android 13 and later, and iOS) only for expiry reminders. No access to contacts or location.

4. On the guest upload page

• Bot check: the page uses Cloudflare Turnstile, which evaluates technical signals such as IP address and browser characteristics on Cloudflare's side; we receive only a pass or fail result.
• Browser storage: the page keeps a random ID in local storage to count hearts (guest view only), and a small flag in session storage so a help note is shown once. No advertising or analytics cookies.
• We do not store visitors' IP addresses. Our hosting provider (Cloudflare) keeps automatic request logs that expire within days; we use them only to keep the service running and never to identify, profile or track anyone.

5. Retention and deletion

• Free: 14 days. Party Pass: uploads open from 3 days before to 3 days after the event date; the album is deleted 14 days after uploads close (17 days after the event). Starter Event Pass: until 18 months after the event date. Pro Event Pass: until 36 months after the event date. Photos added before the event are kept until the same day. Without an event date, the period counts from the purchase.
• When the period ends, photos, videos, nicknames and hearts are deleted automatically, normally within 2 days.
• The host can delete any photo or video, or the whole event, at any time in the app; this takes effect on our servers.
• When an album is deleted or expires, we delete the event and its details as well. The only thing we keep is a one-way hash of each store transaction ID used for that event, so the same purchase cannot be applied twice; it cannot be linked back to you or the event.
• Deleted data can remain in our database's automatic recovery backups for up to 30 days before it is gone.
• No accounts: GalaSnap has no user accounts, so there is no account to delete. Deleting an event deletes its album. To ask us to delete anything else, write to contact@yslabs.dev with the event code (and, for purchases, the order number from your App Store or Google Play receipt).

6. Purchases

Event Passes, upgrades and storage packs are one-time in-app purchases processed by Apple (App Store) or Google (Google Play); we never see your payment details. To verify a purchase and apply it to the right event, the app uses RevenueCat, Inc., which receives a random app ID created by the app (not linked to your name, email or Apple ID) and the store's receipt information — not your photos or videos. See RevenueCat's privacy policy. Apple and Google may provide us aggregated crash and usage statistics if you allowed this in your device settings; GalaSnap contains no crash-reporting or analytics SDK.

7. Service providers and sharing

We do not sell personal information or share it for advertising. We use: Cloudflare, Inc. (hosting, storage, bot check) and RevenueCat, Inc. (purchase verification) and Zoho Corporation (Zoho Mail, which receives emails sent to our support addresses), all acting on our instructions. Zoho may process and store emails in the United States, the European Economic Area and other countries where Zoho operates (Zoho privacy policy; privacy@zohocorp.com). Apple and Google process payments as independent controllers. We may disclose information if required by law.

8. EEA and UK (GDPR)

• Roles: YS Labs is the controller for the personal data processed to run GalaSnap, including photos, videos, nicknames and hearts stored in albums. The event host decides who may upload and who receives the gallery link, and is responsible for their own use of photos they download. If a host uses GalaSnap for business (for example, a planner or venue), the host is also a controller for that use.
• Legal bases: contract (Art. 6(1)(b)) — storing and showing what hosts and guests upload, applying purchases, answering support requests; legitimate interests (Art. 6(1)(f)) — letting hosts and guests share photos of a shared event, including of people who appear in them, keeping the Service secure (bot check, request logs) and handling reports; legal obligation (Art. 6(1)(c)) — keeping purchase and accounting records and answering lawful requests. We do not identify people in photos, process biometric data or make automated decisions about you.
• International transfers: YS Labs is in South Korea, which the European Commission and the UK Government recognize as providing adequate protection. Cloudflare and RevenueCat may process data in other countries, including the United States, under safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
• Your rights: access, rectification, erasure, restriction, objection and data portability. For a photo or video of you, the quickest route is the event host, who can delete it in the app; you can also write to us with the event code and we will help or pass the request on. We reply within one month. You may complain to your local data protection authority.

9. California (CCPA/CPRA)

• Categories collected in the last 12 months: user content (photos, videos, optional nicknames), commercial information (purchase records) and pseudonymous identifiers (a random purchase ID, hashed browser IDs for hearts) — for the purposes in section 2.
• Sale and sharing: we do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the last 12 months.
• Your rights: to know, delete and correct personal information, and not to be discriminated against for using these rights. Send requests to contact@yslabs.dev with the event code; an authorized agent may submit a request with your written permission. We verify requests using the event code or the store order number, because we hold no account details.

10. Children

GalaSnap is for event hosts and their guests and is not directed to children. Hosts must be 18 or older. Children under 13 — or under the age of digital consent where they live (13 to 16 in the EU and UK, 14 in South Korea) — should not upload themselves; a parent or guardian can upload for them. We do not knowingly collect personal information from such children; if we learn we have, we delete it. Children often appear in photos taken by adults: hosts are responsible for following local rules on photographing children, and a parent or guardian can ask the host to remove a photo or video, or write to contact@yslabs.dev with the event code, and we will delete it.

11. Reporting content

If you believe an album contains illegal content, email contact@yslabs.dev with the event code and a short description, or use the Report link on the guest page (GalaSnap 1.3 and later). We review every report and can remove content or disable an album. To handle a report, we may view the reported content and the event's details. See section 8 of the Terms of Use for how reports work.

12. Security

All connections use encryption in transit (HTTPS). Ownership keys and recovery codes are stored only as one-way hashes on our side; storage links are short-lived signed URLs.

13. Changes

If we change how GalaSnap handles data, we will update this page and its effective date before the change takes effect.

14. Contact

YS Labs · Yongin-si, Gyeonggi-do, South Korea · contact@yslabs.dev Privacy contact: YS Labs privacy team · contact@yslabs.dev

한국어 요약 (개인정보 보호법 고지)

• 처리 목적: 이벤트 앨범 제공(사진·영상 저장·표시), 이용권 적용, 부정 이용 방지.
• 처리 항목: 하객·주최자가 올린 사진·영상(소리 포함)과 크기·길이, 선택 닉네임, 이벤트 이름·날짜·언어·플랜, 소유 키·복구 코드의 해시, 구매 기록(상품·스토어 거래 ID), 지원 메일(이메일 주소·내용), 하객 보기 ♥ 기록(브라우저 무작위 ID의 해시). 이름·연락처·위치·광고 식별자는 수집하지 않습니다.
• 보유·이용 기간: 앨범 사진·영상·닉네임·♥는 플랜 기간(무료 14일 · Party 행사 후 17일 · Starter 행사일로부터 18개월 · Pro 36개월) 종료 시 자동 파기(보통 2일 이내). 주최자는 언제든 삭제 가능. 앨범 삭제·만료 시 이벤트 정보와 구매 기록도 함께 파기하고, 같은 결제의 중복 적용을 막기 위한 스토어 거래 ID의 일방향 해시만 남김(개인이나 이벤트와 연결 불가). 데이터베이스 자동 복구용 백업은 최대 30일 안에 사라짐. 지원 메일은 문의 종결 후 3년간 보관 후 파기.
• 제3자 제공: 하지 않습니다(법령에 따른 경우 제외).
• 처리 위탁 및 국외 이전:
  • ① Cloudflare, Inc.(미국 등) — 항목: 사진·영상·닉네임·이벤트 정보·해시 값·♥ 기록, 접속 시 IP 등 기술 정보(봇 확인·요청 로그) / 업로드·이용 시 네트워크로 전송 / 호스팅·저장·봇 확인 / 위 보유 기간(요청 로그 약 3일) / 연락처: Cloudflare 개인정보처리방침
  • ② RevenueCat, Inc.(미국) — 항목: 앱이 만든 임의 구매 ID(가명), 스토어 영수증 정보(상품·거래 ID) / 구매 시 전송 / 구매 확인 / 구매 기록 보유 기간(앨범 삭제·만료 시까지) / 연락처: RevenueCat 개인정보처리방침
  • ③ Zoho Corporation(미국·유럽경제지역 및 Zoho가 운영하는 기타 국가) — 항목: 지원 메일(이메일 주소·내용·첨부) / 이용자가 메일을 보낼 때 네트워크로 전송 / 지원 메일 수신·보관(Zoho Mail) / 문의 종결 후 3년 / 연락처: privacy@zohocorp.com 국외 이전을 원하지 않으면 서비스 이용(업로드·구매)을 하지 않으면 되며, 이 경우 앨범 기능을 이용할 수 없습니다.
• 파기 방법: 저장소 객체와 데이터베이스 행을 복구할 수 없게 삭제.
• 정보주체의 권리: 열람·정정·삭제·처리정지를 요구할 수 있습니다. 앨범 사진은 주최자가 앱에서 바로 삭제할 수 있고, contact@yslabs.dev로 이벤트 코드와 함께 요청하실 수도 있습니다.
• 만 14세 미만 아동: 만 14세 미만 아동은 직접 업로드하지 않도록 하며, 법정대리인이 대신 올릴 수 있습니다. 법정대리인 동의 없이 만 14세 미만 아동의 개인정보가 수집된 것을 알게 되면 지체 없이 파기합니다.
• 자동 수집 장치: 하객 페이지는 ♥ 집계용 무작위 ID(로컬 저장소)와 안내 1회 표시용 값(세션 저장소)을 사용하며, 광고·분석 쿠키는 없습니다. 브라우저 설정에서 사이트 데이터를 삭제할 수 있습니다.
• 안전성 확보 조치: 전 구간 암호화 전송(HTTPS), 소유 키·복구 코드의 해시 저장, 서명된 단기 저장소 링크.
• 개인정보 보호책임자: YS Labs 개인정보 보호 담당 · contact@yslabs.dev
• 권익 침해 구제: 개인정보분쟁조정위원회(1833-6972, www.kopico.go.kr), 개인정보침해신고센터(118, privacy.kisa.or.kr), 대검찰청(1301), 경찰청(182).
• 처리방침 변경: 변경 시 이 페이지와 시행일을 시행 전에 갱신합니다. 시행일: 2026년 10월 25일.