Privacy Policy

This Privacy Policy explains how Xarazo collects, uses, stores, and protects personal data when you use our event photo-sharing platform. We respect your privacy and are committed to transparency.

1. Who We Are

Xarazo is an event photo-sharing platform. "We", "us", or "Xarazo" refers to the Xarazo platform and its operators. For data-related questions, contact us via our contact page.

2. Data We Collect

From Hosts (event creators)

• Email address — required at event creation, used to send your event QR code, event reminders, upload confirmations, and the morning-after photo summary
• Payment data — processed by Stripe; we do not store your card details. Stripe may store payment metadata per their own privacy policy
• Event metadata — event name, date, contribution window preference

From Guests (photo uploaders)

• Name — required before first photo upload, displayed as a name badge on your photos in the gallery
• Email address — optional, collected after upload to receive a copy of uploaded photos; never shared with third parties
• Photos — compressed client-side before upload, stored on Cloudflare R2 infrastructure

Automatically Collected

• IP address — used for locale and currency detection (to show the correct pricing); not stored beyond the session
• Browser/device data — basic technical data for service functionality (no fingerprinting)

3. How We Use Your Data

• To operate and deliver the Xarazo service
• To send hosts event-related emails (QR code, reminders, morning-after summary)
• To send optional post-upload photo emails to guests who provide their email
• To detect your region for currency display (IP-based, not stored)
• To process payments via Stripe
• To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Photo Storage

Photos are stored on Cloudflare R2 (a secure, S3-compatible cloud storage service). Photos are kept for 90 days from the event date, then permanently deleted. See our Data Retention & Deletion Policy for full details including early deletion requests.

5. Cookies & Service Worker Caching

Xarazo uses:

• Session storage — temporary, browser-only; stores your name for future uploads within the same session; cleared when you close the tab
• Service Worker caching — caches static assets (page HTML, scripts, styles) to enable faster load times and offline browsing; no personal data is cached
• No third-party tracking cookies — we do not use Google Analytics, Facebook Pixel, or similar tracking tools

Locale and currency detection is based on your IP address at page load time. This data is not stored in cookies or our database.

6. Third-Party Services

• Stripe — payment processing; see stripe.com/privacy
• Cloudflare R2 — photo storage; see cloudflare.com/privacypolicy
• Google Fonts — typography; Google may receive your IP address when fonts load

7. Data Retention

See our Data Retention & Deletion Policy for specific retention periods and deletion procedures.

8. Your Rights

You have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to our retention policy)
• Object to processing of your data
• Request early deletion of your event or photos

To exercise any of these rights, contact us via our contact page.

9. Children's Privacy

Xarazo is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has submitted data through Xarazo, please contact us and we will delete it promptly.

10. International Users

Xarazo serves users worldwide. We comply with GDPR (see GDPR Compliance Notice) and applicable regional data protection regulations. EU/UK users have specific rights under GDPR which are described in our GDPR notice.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted via HTTPS.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We'll note the "last updated" date at the top of this page. Continued use of Xarazo constitutes acceptance of the updated policy.

13. Contact

Data-related questions or requests? Contact us via our contact page.

Related policies: Terms of Service · Data Retention · NDPR · GDPR · Content License