Privacy Policy

Memorees ("we", "us") helps hosts collect photos from event guests via a QR code. This page explains what we store, why, and how to get it removed. If anything here is unclear, email hello@memorees.click.

What we collect

• Host account: email address, hashed password (via our auth provider), and the events you create.
• Guest activity: the display name a guest types when joining, the photos they upload, and a device identifier used only for anti-abuse rate limiting.
• Event content: event name, occasion, host name, and the photos guests upload while the event is live.
• Payments: Polar (our payment processor) handles card data. We store only the resulting order ID, plan, and amount.
• Basic logs: IP address and timestamps, kept short-term for security and rate limiting.

What we don't do

• We don't sell your data. Ever.
• We don't run third-party ad or tracking pixels inside events.
• We don't make event photos public. Only the host and invited guests see them.
• We don't use your photos to train AI models.

Retention

Free events are stored for 7 days after creation. Paid tiers extend retention as described on the pricing page. After retention expires, photos are deleted from storage. Host accounts persist until you delete them.

Your rights

You can request a copy of your data, correct it, or delete it entirely by emailing hello@memorees.click from the address on your account. Guests can ask a host to remove their photo, or email us directly with the event code and their guest name.

Minors

Memorees is not designed for children under 13. If a guest photo captures a minor and a parent or guardian wants it removed, email us — we'll delete it within 72 hours.

Sub-processors

• Supabase (database, auth, storage)
• Cloudflare (hosting, DDoS protection)
• Polar (payments)
• Resend / equivalent (transactional email)

Changes

If we change this policy in a material way, we'll email active hosts and update the "last updated" date above.

Questions? hello@memorees.click