Privacy

The short version

Your album starts private. Guests can contribute through your link; the signed-in event owner can view and download the collection. If the owner enables guest sharing, anyone with the guest link can view permitted uploads and, if saving is enabled, download and share copies. Earlier uploads without that permission stay host-only. We do not sell your uploaded media or use it to train models.

What we collect

From you: your email address, your event date, and what you tell us about your event. From your guests: the photographs and videos they choose to send, their name if they give one, and their email if they provide it. An address alone does not subscribe them. The photo reminder and optional thank-you/anniversary updates are separate, unchecked choices. We record the address, choice, time and wording version, including withdrawals and address changes, as consent evidence for the album’s retention period. Each new upload also records its permission version, scope and time.

Beta applications and support messages include the email and details you submit. Short-lived request counters help prevent abuse; they use a keyed hash instead of storing a raw IP address.

What we do with it

We store guest uploads, show them to the event owner and prepare the original files for download. If a guest asks for an upload reminder, their email is used for that one reminder, scheduled in a day or two while uploads remain open. Optional messages identify their.photos/1232216 B.C. Ltd. and include contact details and a no-sign-in unsubscribe link. Stopping optional emails stops reminders and updates for that address and album without removing uploads. These choices do not subscribe anyone to marketing.

Who else sees it

Our hosting and processing providers handle data needed to operate the service. Files are stored with Cloudflare, the database is Supabase, the site runs on Vercel, and configured email goes through Resend. Guest footage is not sent to an external AI model. If a recap was provided with an earlier booking, its optional sharing link remains under the owner’s control; recipients can forward it.

Who sees the album

The event owner can view saved uploads until they are removed or the album expires. Guests see only their own uploads unless the owner opens the album to guests, which is off until they choose it and can be set to viewing only or viewing and downloading. Anything awaiting review, or removed, is never shown to other guests. Turning sharing off stops new access; links already issued may work for up to a minute, and displayed, downloaded or forwarded copies cannot be recalled.

Deletion

Every album is deleted thirty days after the first anniversary of the event, or of its creation when no date was given, and the date is shown in the album. The next daily cleanup then removes hosted originals, working copies, thumbnails and recaps. Account and payment records are separate from uploaded media. A guest can remove anything they added at any time before that, using the same device and browser they uploaded with. If you want it all gone sooner, ask and we will do it.

A year on, we remind the host of the deletion date. Guests who separately choose optional album updates may receive a thank-you from the host and a reminder a year on. Each includes a link to stop those updates. Addresses provided only for the original upload reminder are not included. Guest emails contain links rather than copied photographs; album access and photo review still follow the host’s settings. Hosts may receive approved thumbnails. Delivery records help us retry failed messages without resending successful ones.

Where a visit came from

When you start a free album, we keep campaign labels, the public landing-page path and the referring website’s origin to understand which campaigns bring people who use the product. We link them to your account only after you confirm your email. We record when you create an album and when its first approved upload is saved. Free-beta measurement stays inside their.photos; it is not sent to advertising networks and includes no uploaded photos, videos or guest details. Unconfirmed signup records use a hash of the email for matching, are not anonymous, and are deleted after 30 days. Campaign details are cleared after 90 days. Account milestones are removed when the account is deleted.

If you arrive from an advertisement or a search, the campaign labels in the link (utm_source and its relatives) and the click identifier the advertising network adds are kept for the length of that browser tab and recorded against an order if you buy. It tells us which advertisement paid for itself. If you buy, we tell the network that sent you that its advertisement worked: Google receives the click identifier it created, and Meta receives its click identifier together with a hashed version of your booking email for purchases referred by Meta. The hash can be matched to an email already known to Meta; it is not anonymous data. Reports include the purchase time, amount, currency and order reference; Meta also receives the page where your visit began. We do not include uploaded photographs, videos or guest details. Our site sets no advertising cookie and installs no advertising pixel.

Optional website analytics

If you choose “Allow analytics”, Google Analytics measures visits to our public pages, demo playback, album-button clicks and steps toward checkout. It uses cookies for up to 90 days and receives basic browser/device information and the network information needed to process the request. We send only approved public-page addresses and fixed interaction labels, not what you type into forms, email addresses, event names, uploaded media or private album, sign-in and payment-return links. Google signals and advertising personalisation are disabled. Analytics is not loaded on private pages.

Analytics is optional and off until you agree. “No thanks” leaves it off without affecting your album or checkout. Use “Cookie choices” on a public page to change your choice; declining stops collection and removes our Analytics cookies. We remember your choice on this browser for six months. Browser blocking and declined consent mean these reports do not count every visitor. Payment records remain our source for completed purchases.

Saved previews

We retain limited source and campaign labels with your preview to measure saved previews and subsequent purchases. These labels exclude advertising click IDs, full referrer URLs and private album paths. Preview saving does not subscribe you to marketing email.

If you ask us to save a sample album, we keep your email, album name, chosen theme, symbol, border, paper texture and any event type or date you choose to provide to send an access link and restore the preview. Unconfirmed previews expire after one day; saved previews expire 90 days after saving. Previews contain sample photographs and do not open guest uploads. Saving one does not subscribe you to promotional emails or event reminders. You can ask hello@their.photos to delete it.

Children

Children appear in wedding photographs. We do not identify anyone by name, we do not build profiles, and the material is deleted on the schedule above.

Your rights

Ask us for a copy of what we hold about you, or ask us to delete it, and we will. Downloaded copies held by the couple or guests are outside our control.