Privacy

The data controller is the operator named in the imprint. For privacy questions, reach us at [privacy@flash.studio].

Guests: display name, chosen category (for the optional gender separation) and uploaded photos. To prevent abuse we store an anonymized (hashed) value of your IP address — never the plaintext IP. Hosts: email address and name for account management.

All event photos are automatically and irreversibly deleted 30 days after the event by default (optionally extendable to 90 days). This strict deletion rule is part of our privacy-by-design approach.

The application and database are hosted with Supabase (Frankfurt, Germany region) and Vercel. Your data stays within the European Union.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. A simple email to us is enough to exercise them.

We use only strictly necessary cookies: a session cookie for guests (to associate your photos) and a cookie storing your language choice. There is no tracking and no sharing with third parties for advertising.