Privacy Policy

Last updated: October 31, 2026

SharePix LLC (“SharePix,” “we,” “us,” or “our”), provides an event photo-sharing service at sharepix.net (the “Service”). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By using the Service, you agree to this Policy.

Most guests can browse or contribute photos without an account. Some event features ask for additional information, as explained below. We collect only what we need to run events, and we never sell your information.

Who this Policy covers

Hosts — people who create an account and set up an event.
Guests — people who scan an event’s QR code or link to view a gallery or upload photos. Guests do not need an account.
Booth attendees — people who choose to sign up for photo delivery at an event where the host has enabled booth mode.

Information we collect

From hosts (account holders)

Account details: your email address and a password, managed through Amazon Cognito. If you enable multi-factor authentication (MFA), we store the setting needed to prompt you for a one-time code.
Event details: event name, date, plan, event/access codes, and settings you configure.

From guests

Photos and videos you choose to upload to an event gallery.
An optional name or nickname you may add so the host knows who contributed (for example, “Aunt Maya”). This is optional and stored on your own device to save you retyping it; it is attached to photos you upload.
Booth sign-up details, when booth mode is enabled: your name, email address, event, and the time you agreed to receive booth photos by email. We also store a random QR token and a private gallery key; neither contains your email address. The event host can view the sign-up details. The event photographer uses your name and QR code to match photos.

Ordinary guest uploads and gallery viewing do not require an email address, phone number, or account. Booth mode is different: if the host enables it, an attendee enters a name and email address and agrees to receive photos from that event. A guest who orders prints also provides the details described below. Photos and videos can themselves contain personal information, including faces, locations, details visible in the image, and file metadata.

Booth-mode sign-up

We use booth sign-up details to identify the attendee, match photos to them, and email them when the photographer approves photos for delivery. The host can view the attendee list and booth photos; the photographer uses the attendee’s name and QR code while matching and reviewing photos. Each attendee’s gallery shows only photos approved and assigned to that attendee. It opens through a unique link sent by email, without an account. Anyone who receives or is given that link can open it, so attendees should share it only with people they trust.

On a personal phone, the sign-up page stores the attendee’s name and QR token in that browser so the code can be reopened. Kiosk mode does not save the sign-up on the shared device. Attendees can stop further booth emails using the link in an email; this does not close the photo gallery.

If you order prints

Ordering a physical print is optional. Uploading photos and browsing a gallery never require it, and nothing about ordering is a condition of taking part in an event. If you do order, we need what any purchase and delivery requires: your name, shipping address, and an email address for the receipt and delivery updates. You enter these at Stripe’s checkout, not on SharePix.

We keep a record of the order — the items, the shipping name and address, the email address, and the order status — so we can answer questions about it, resolve delivery problems, and meet accounting obligations. As with everything else in this Policy, we do not sell this information. It is used to fulfil your order and support it, and shared only with the providers named below who carry that out.

Payment information

Payments are processed by Stripe through its hosted checkout. Your full card number and security code are entered on Stripe’s pages and are never sent to or stored by SharePix. We receive a confirmation from Stripe that includes limited details such as the amount, currency, plan, payment status, and the email you provided at checkout.

Information collected automatically

Like most online services, our infrastructure providers automatically log technical information such as IP address, browser type, and request timestamps to operate the Service, keep it secure, and diagnose problems. We use essential browser storage (for example, to keep you signed in, remember your uploader nickname, and save booth sign-up details or guided-setup progress on your own device). We do not use advertising or cross-site tracking cookies.

We use Cloudflare Web Analytics to count page views and see which pages people visit. It sets no cookies, stores no identifier in your browser, and does not follow you to other sites, so there is no “accept cookies” banner to dismiss and nothing to opt out of. It tells us how many people looked at a page — not who they were. The help chat matches questions in your browser; it does not send the text you type to SharePix. Guided-setup progress is saved in your browser storage. If you choose to email support, your email message is sent to us through your email provider.

The sentences above about page-view counting describe Cloudflare Web Analytics only. SharePix’s own diagnostic logs are described next.

Diagnostic logs

So that we can work out what went wrong when an event has a problem, the SharePix web app keeps short technical logs of what happened on a device: which pages were opened, whether the device could connect, which step of an upload or of the live slideshow failed and roughly why, and the kind of device and browser (for example “Safari 17 on iOS 17”). Each device is given a random code made on that device, which is shown as a support code. It is not linked to a name, an email address or an account, and a person can read it out to us to help us find their device’s log.

The logs never contain photos or videos, guest book or other messages, names, email addresses or IP addresses, and they never contain the private key in a gallery link (the part after the “#”) or any signed address. Anything that looks like one is removed before it is stored. They are readable only by the host of the event concerned and by SharePix support, are kept for 60 days, and are then deleted automatically.

Your choice. You can turn diagnostic logs off on this device, and we also switch them off if your browser sends a Do Not Track signal. Turning them off stops new logs and deletes any that are waiting on your device.

How we use information

To create and operate events and galleries.
To let guests upload photos and hosts view, moderate, and download them.
To operate booth sign-up, match photos to attendees, and deliver approved photos by email.
To authenticate hosts and keep accounts secure.
To process payments and provide receipts through Stripe.
To detect, prevent, and respond to abuse, fraud, and security issues.
To respond to your requests and provide support.
To comply with legal obligations.

Photos and event content

Photos and videos uploaded to a shared event gallery are visible to the event’s host and to others who have access to that event (for example, guests with the link or QR code, according to the event’s settings). Hosts can view, download, moderate, and delete content in their events. If you are a guest and want a photo you uploaded removed, ask the event host, or contact us at privacy@sharepix.net.

We do not sell your personal information. We share information only:

With service providers that run the Service on our behalf,Amazon Web Services (application hosting, databases, and transactional email), Cloudflare (photo storage and delivery through R2, and page-view analytics), Stripe (payment processing), and Prodigi (print manufacturing and shipping). Prodigi is involved only when you order a print: it receives the shipping name and address for that order and retrieves the photo you chose, in order to make and send it. Each provider receives information needed for its part of the Service and handles it under its own privacy and security commitments.
Within an event — content and any nickname you add are shared with the host and others who have access to that event, as described above.
For booth mode — the host can access attendee names, email addresses, and booth photos. The event photographer uses attendee names and QR codes to match and review photos. Approved photos are delivered to each attendee through their unique gallery link; other attendees cannot browse that gallery through SharePix.
For legal reasons — if required by law, or to protect the rights, safety, and security of our users, the public, or SharePix.
In a business transfer — if SharePix is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

Where your information is stored

SharePix uses Amazon Web Services and Cloudflare to operate the Service. Our application and database infrastructure is hosted on Amazon Web Services in the United States. Photos and videos may be stored and delivered through Cloudflare R2. These providers may process information in other locations as needed to deliver their services. If you access SharePix from outside the United States, information may be processed in the United States and other locations where our providers operate, where privacy laws may differ from those in your country.

How long we keep photos and events

Each event moves through a lifecycle:

Upload window — 60 days from creation (extendable in 30-day blocks). Guests can upload and view the photos.
Gallery — 12 months from when the upload window closes. Guests can view reduced-resolution photos and the host keeps full access and downloads for the whole period. A free event keeps its gallery for 14 days rather than 12 months. Events on a retired plan keep the shorter windows they were sold with (about 3 weeks on Starter, 3 months on Standard, 1 year on Premium), measured the same way.
Private archive (90 days). After that, photos move to a private archive that hosts can’t see. For 90 days we can restore them if you ask, and then they are deleted, followed by a 30-day recovery period during which we can restore them if you ask.

In booth mode, full-resolution originals are deleted 30 days after the event date (or, if no event date is set, 30 days after the event was created), followed by a 30-day recovery period during which we can restore them if you ask. Reduced-size previews remain available under the event’s gallery-retention period above. Booth attendee names, email addresses, and sign-up records are removed with the event’s photos during scheduled cleanup after the gallery and 90-day archive periods end. A host can delete an individual attendee record or event earlier. Hosts can delete their photos and events at any time. A deleted photo or video is removed right away and can no longer be seen or downloaded. We also keep a backup copy of the file for 30 days after that, a recovery period during which we can restore it if you ask. The backup is private: no guest, host, or other user can open it. Comments, likes, and attendee records are not part of it. A photo you upload is also kept in this backup for up to 30 days after we remove its hidden location data, and the backup copy may still contain that location data until it is deleted. We may retain limited records (such as payment confirmations) as required for accounting, legal, or fraud-prevention purposes.

When our automated screening flags an uploaded photo as possibly explicit, we keep the network (IP) address and account identifier it was uploaded from, so that we can investigate abuse. We do not record this for other uploads. If we close an event for violating our Terms, its content and these records are preserved rather than deleted, and may be disclosed to law enforcement or other authorities where the law requires or permits.

When a host removes an event, it is removed from their account. If that event is under review, or has been closed, for possible violations of our Terms, its content and records may be preserved for the same purposes rather than deleted.

Security

We take reasonable measures to protect your information, including encrypted connections, scoped access controls, optional multi-factor authentication for hosts, and keeping card data with Stripe rather than on our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing. To make a request, email us at privacy@sharepix.net. We will respond as required by applicable law. We do not sell personal information or share it for cross-context behavioral advertising.

Hosts can update account details and delete events and photos at any time.
Guests can ask the host, or contact us, to remove content they uploaded.

Children’s privacy

The Service is not directed to children under 13, and children should not sign up for booth mode on their own. If a child under 13 is participating in a booth event, a parent or guardian should provide the child’s name and the adult’s email address and agree to receive the photos on the child’s behalf. Events often include photos of children uploaded by adults; the host is responsible for having the right to collect and share that content. If you believe a child has provided us personal information directly, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above, and for significant changes we will provide a more prominent notice. Your continued use of the Service after an update means you accept the revised Policy.

Contact us

If you have questions about this Policy or your information, contact us at privacy@sharepix.net, or write to us:

SharePix LLC 617 Locust Street #1001 Monticello, MN 55362 United States