Festive Fotobooths turns an iPad into a photo booth for an event, with classic photos, AI looks, a QR code for each guest's photo, and a gallery and photo wall for the night. This policy explains what we collect from the hosts who set up events and the guests who use the booth, and what we do with it. In short: we collect what's needed to run your event, guests never give us their name or contact details, we don't sell anything, and we don't use advertising or analytics trackers.
What we collect
From hosts. Your email address, which is how you sign in. Everything you add to your event: its name, date, place and details, your invitation, logo and other files you upload, the messages you send to the design chat, and your choices for the booth (frames, wording, looks and settings). If you turn on alerts on your phone, we keep that phone's notification address.
From guests. The photos taken at the booth, or with the virtual booth on a guest's own phone, and the look each guest chose. Guests don't sign up, and we never ask for a name, email address or phone number. If the host turns on the grown-up check, a guest taps to confirm; we don't record who.
From helpers. Nothing personal: a helper signs in with the event's link and PIN.
When you contact us. Your name, email address and message, sent to us by email.
Technical information. Like most websites, our hosting provider records basic request logs (such as IP address and browser type) to keep the service secure and working. To limit abuse of our contact form we keep a one-way hash of your IP address for about an hour, never the address itself. We also keep a record of actions taken on each event (for example, a photo hidden or a setting changed) so hosts can see what happened and we can fix problems.
How we use it
- To run each event's booth, photo pages, gallery and photo wall, and the host's studio.
- To send the emails you need, such as sign-in links and messages from your helpers.
- To answer support requests.
- To keep Festive Fotobooths secure, prevent abuse, and fix problems.
We don't sell personal information, we don't use it for advertising, and we don't use photos to recognise or identify people.
AI looks and the design chat
When a guest chooses an AI look, their photo is sent to Google's Gemini image model, which returns a restyled version: new outfits and a new scene, with the same faces. Hosts testing a look on their own selfie send it the same way; that selfie isn't saved. The booth's choose screen tells guests when an option uses AI, unless the host turns that notice off.
When a host designs an event, the messages and files they share (such as an invitation or logo) are sent to AI providers to draft the booth's wording, looks, frames and artwork: Anthropic, OpenAI and Google, through Vercel's AI Gateway or directly. These providers process the content only to provide the service to us. Nothing changes on a published booth until the host publishes it.
Who can see what
- Each photo has its own page, opened by the QR code shown on the booth. Anyone with that link can see the photo. Links are long and random, we don't publish a list of events or photos, and these pages ask search engines not to index them.
- An event's gallery and photo wall show its photos to anyone with their link. The booth's “Find my photo” screen shows them to people at the event. Hidden photos are never shown.
- The host can see every photo of their event, hide or delete any of them, and download them all. Helpers the host invites can see and hide photos.
- One event's photos are never visible from another event.
- We (the Festive Fotobooths team) can see events to provide support. When we look at a host's photos or change their event, it's logged and the host is told.
Service providers
We use a small number of companies to run Festive Fotobooths, each only for the job listed:
- Vercel: hosting the website, and the AI Gateway that connects to some AI providers.
- Supabase: our database and file storage.
- Google (Gemini): AI looks on photos, and some design drafting.
- Anthropic and OpenAI: drafting the booth's wording, looks, frames and artwork from what the host shares.
- Resend: sending email.
- Your phone's notification service (Apple, Google or Mozilla): delivering alerts, if you turn them on.
We may also share information if the law requires it, to protect people's safety, or as part of a sale or reorganisation of the business, in which case this policy continues to apply.
Cookies and storage on your device
Hosts get a sign-in cookie that lasts up to 30 days, and helpers one that lasts 2 days. A paired booth iPad keeps a cookie that ties it to its event. The booth and the virtual booth keep photos on the device until they've uploaded, so nothing is lost if the connection drops. We don't use advertising or analytics cookies.
How long we keep it
- Photos stay up after the party so guests can find them later. The host can hide or delete any photo, or all of them, at any time, and download them first. A deleted photo's link stops working.
- Test photos from the booth check are deleted as soon as they've uploaded.
- A host can ask us to delete their event and its photos, or their account.
- Support messages are kept in our email for as long as we need them to help you.
Your choices
You can ask us for a copy of your information, to correct it, or to delete it. Hosts can edit their event and delete photos in the studio. If you're a guest and want a photo of you taken down, ask the host, or send us a message with the photo's link and we'll take care of it. Depending on where you live, you may have additional rights under local law, and we'll honour them.
Children
Hosts must be adults. Many events, such as block parties, school events and birthdays, include children. Hosts can mark that kids will be there, require a grown-up to confirm before an AI look, switch AI looks off, and hide or delete any photo. Hosts are responsible for having the permissions needed to take and share photos of the children at their event. If you believe a photo of a child should be removed, tell us and we'll act quickly.
Security
Original, unframed photos and private files are stored privately and are never served to the public. Each event's data is kept separate, and booths, helpers and hosts can only reach their own event. No system is perfectly secure, but we work to protect your information and will tell affected hosts if a breach affects their event.
Changes
We'll update this page as Festive Fotobooths changes and change the date at the top. If a change materially affects how we use your information, we'll tell hosts by email first.
Contact us
Questions about this page? Send us a message and we'll reply by email.