Privacy

What we keep, and for how long.

Cliq holds wedding photographs, which are about as personal as data gets. This page says plainly what is stored, where it sits, when it is deleted, and how to have it removed sooner.

Last updated 10 September 2026

Who is responsible

Social Flyer, registered with the Dutch Chamber of Commerce under 74392212, operates Cliq Photo. For anything on this page, write to hello@cliq.photo. Full details are on the contact page.

There are two kinds of people in this product and the answer is different for each. An organizer has an account and pays for a gallery. A guest scans a QR code at a wedding, types a name, and uploads, with no account and no password.

If you are an organizer

Your account
Your name, your email address, and your password stored as a hash we cannot reverse.
Your sessions
While you are signed in, a session record holding your IP address and browser user-agent, so a session can be recognised and revoked. Sessions expire after 30 days.
Your gallery
Its title, the wedding date, an optional welcome message, and the settings you choose.
Your payment
The amount charged, the currency, the date, and Stripe's own reference numbers. We never see or store your card details: payment happens on Stripe's own pages.

You can delete your account yourself, from your account page. That removes your galleries, every photo and video in them, every guest record, and the account itself. It is immediate and cannot be undone. We keep the payment record required for tax purposes, which contains no photographs.

If you are a guest at a wedding

You do not have an account with us and we do not create one for you. To upload, you type a name, whatever you choose to type. Your browser keeps a few things on your phone so the page survives a bad connection; they are listed further down, and none of them reach us.

What you upload
The photos and videos themselves, at full quality, plus the filename, size, type, dimensions, and for video the duration and whether it carries sound.
Your name
As you typed it, so the couple can see who sent what.
Your IP address
Held briefly, under 24 hours, only to limit how many people can register from one connection, then deleted.

Everything you upload goes to the couple whose gallery you scanned. It is visible to them, and to anyone else who has their gallery link. It is not public, not indexed by search engines, and never shown on any feed. If you want something you uploaded removed, ask the couple, who can delete it themselves, or write to us.

What stays on your own phone

Reception at a wedding venue is often poor, so the page keeps a little on your device to survive it. All of this lives in your browser, on your phone. None of it is sent to us, and clearing the site's data removes all of it at once.

Your guest token
So the gallery still recognises you if you come back. Not a tracking cookie, and not shared with anyone.
A note about an unfinished upload
The filename, size and date of a file that did not finish sending, so the page can offer to send it again. Kept for a day, then dropped.
A copy of anything you record here
A photo or video taken with the camera in this page is created in your browser and is not saved to your camera roll, so until it reaches us, this copy is the only one that exists. It is removed the moment the upload succeeds, and in any case after 7 days.

That last one is why an interrupted recording can be offered back to you intact rather than lost. If your browser will not allow it, whether that is private browsing or a phone with no room left, the page says so rather than implying a safety net it does not have, and offers to hand you the file so you can keep it yourself.

Where it is stored

Photographs and videos are stored with Hetzner Object Storage in Germany. The database and the application run on a Hetzner server, also in the EU. Uploads travel from your phone to that storage directly over an encrypted connection.

We use three other companies to run the service, and nobody else:

Hetzner
Germany. Servers, database and file storage.
Stripe
Ireland and the USA. Payments. They receive your email address and the amount; we never receive your card details.
Resend
EU region. Sending email. They receive the address a message goes to and its contents.

We do not use analytics, advertising, tracking pixels, social media buttons, or facial recognition. We do not sell anything to anybody. The only cookie is the one that keeps an organizer signed in.

How long it is kept

Everything is measured from the wedding date, not from when the gallery was bought:

Uploads close
30 days after the wedding. Guests can no longer add anything.
The gallery closes
12 months after the wedding. Until then the couple can view and download everything.
Everything is deleted
30 days after that, permanently, from the database and from storage. There is no archive we can restore from afterwards.

We email the organizer 30 and 7 days before the gallery closes, so nothing disappears without warning. Our own system will not delete a gallery unless one of those messages was actually delivered.

Your rights

  • See what we hold about you, and get a copy.
  • Have anything wrong corrected.
  • Have your data deleted. Organizers can do this themselves, immediately, from the account page.
  • Object to how we use it, or ask us to restrict it.
  • Complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you think we have got this wrong.

Write to hello@cliq.photo and we will answer within a month, usually much sooner.

Limits worth knowing

A gallery holds files up to 500 MB each and 20 GB in total. The gallery link is the only key: anyone who has it can add photos and see the gallery, and anyone who does not, cannot. That means it is worth treating the link the way you would treat a key: on your table cards, not on a public website.