Privacy Policy

The short version

Toast Album exists to collect your event's photos privately. Galleries are private by default, we never sell personal information, photos are never used for advertising or AI training, and hosts can delete their event media at any time.

Who we are

Toast Album, ABN 60 422 621 849 ("we", "us") provides QR-code photo sharing for weddings and events. For customer or legal enquiries, contact us at support@toastalbum.com.au. For privacy enquiries, contact privacy@toastalbum.com.au.

What we collect

Hosts (account holders): name, email address, password (stored as a secure hash by our authentication provider), event details you enter (event name, date, type, optional monogram, optional guest-page cover photo, optional passcode stored as a hash), and payment records. Card details are processed by Stripe and never touch our servers. If you sign in with Google, we receive your name and email address from Google, plus basic profile details such as your Google account ID and profile picture link; we never see your Google password.

Guests: the photos you upload, an optional display name (shown beside your photos to everyone with the event link), a random device identifier stored in your browser (used to limit repeated requests and passcode attempts, tie each upload to the browser that started it, and cap unfinished uploads per device), and standard technical logs (such as IP address) used for security and rate limiting. Guests do not create accounts.

How photos are stored and who can see them

Uploads are stored in private cloud storage operated by Supabase in Sydney, Australia, and are only reachable through short-lived signed links issued to people with access to the event: the host, and guests who have the event link and, where enabled, the event passcode. Galleries are never public or indexed.

So photos can be recovered if something goes wrong, we may keep a backup copy of each event's photos in private storage operated by Backblaze in the United States. Only we can reach it. When a photo is deleted, any backup copy of it is removed within 35 days.

The original file a guest uploads is kept exactly as their phone saved it, including any location (GPS) and camera details stored in it, and the host can download that original. The gallery shows a copy with that information removed. To avoid sharing your location, turn off location for your camera, or remove it from the photo, before uploading.

If a host adds a cover photo for the guest page, it is resized and stripped of location and camera details before it is stored, is shown only to people with the event link (and passcode, where enabled), and is deleted with the event.

How we use information

To run the service: showing galleries to authorised guests, letting hosts retrieve original event files, processing payments, preventing abuse, and providing support. We do not sell or rent personal information, and we do not use your photos for marketing, advertising, or model training.

When something fails on our servers, an error report goes to Sentry, an error-monitoring service that may store it outside Australia, so we can fix it. A report has the technical details of the error and the page's address without its query or link details. It never includes photos, passcodes, guest links, cookies, or anything you typed.

Who helps us run Toast Album

We use these service providers. Some keep or process information outside Australia, in the places shown. We take reasonable steps, including through our agreements with them, to make sure they handle personal information consistently with the Australian Privacy Principles.

• Supabase: Accounts, the database and photo storage. Sydney, Australia.
• Vercel: Hosts the website and keeps short-lived request logs. Sydney, Australia; Vercel is a US company and may access logs from the United States.
• Backblaze: Backup copies of photos. United States.
• Stripe: Payments. Australia and the United States.
• Resend (sending through Amazon Web Services): Account and event emails. Japan and the United States.
• Cloudflare Turnstile: Checks that sign-up, login and password-reset forms are used by a person. Worldwide network; United States.
• Google: “Continue with Google” sign-in, and Google Analytics and Ads measurement if you allow it. United States.
• Sentry: Error reports when something fails on our servers. United States.

Payments

Payments are processed by Stripe. We keep records of what was purchased for which event (amount, plan, payment status) for accounting and support. See Stripe's privacy policy for how they handle card data.

We keep payment and order records (what was bought, the amount, date and payment status, never card details) for as long as Australian tax and accounting law requires, currently at least five years, even after the event or account is deleted.

Retention and deletion

Free events include 60-day gallery retention; paid events retain their gallery under the purchased plan. When the retention period ends, the gallery closes to guests and the host can still download the photos for a further 30 days. The photos are then permanently deleted, and any backup copies within 35 days after that. We email the host 14 days and 3 days before that deletion. Hosts can delete individual photos or all event photos from the event management page at any time, and deleting an event removes its stored media. To request deletion of personal information or an account, email privacy@toastalbum.com.au.

Guests' rights and host responsibilities

Hosts are responsible for telling guests that photos uploaded at their event are shared into the event's private gallery. If you appear in a photo and want it removed, contact the event host or email privacy@toastalbum.com.au with the event details and we will help.

Cookies and browser storage

Essential authentication cookies keep hosts signed in. A private guest-link credential for each event and the random guest device identifier are stored in local browser storage, an optional passcode is kept in session storage, and an interrupted upload queue may be kept in IndexedDB for up to 24 hours, subject to browser limits. The queue is capped at 25 photos and 500 MiB and can be cleared from the upload page or by clearing site data.

If a guest enters a display name, it is remembered in that browser so they don't have to type it again; clearing site data removes it.

We use Vercel's privacy-focused analytics on public marketing pages to understand basic site usage. It is not loaded on account, host-management, private guest upload, or gallery pages. We do not use advertising pixels on private guest or host-management pages, and we do not sell browsing data.

With your permission, we also use Google Analytics on an explicit set of public marketing, signup, and login pages to measure campaign attribution and completed purchases. Allowing measurement can let Google set analytics and advertising-measurement cookies and lets us share ad-click and purchase measurement data with Google Ads to measure ad results. Personalised advertising and remarketing remain disabled. If you arrive from an ad, its campaign details are kept unsent in this browser tab's session storage until you choose; declining or closing the tab removes them. URLs and events sent to Google exclude private guest credentials, event codes, authentication callbacks, payment callback identifiers, names, email addresses, event names, and photo information. You can change your choice at any time using Privacy & cookie settings in the footer.

Your rights

You can request access to, correction of, or deletion of your personal information by emailing privacy@toastalbum.com.au. We handle requests in line with the Australian Privacy Principles and, where applicable, the GDPR.

Complaints

If you're unhappy with how we've handled your personal information, email privacy@toastalbum.com.au. We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Changes

If we change this policy, we'll update this page and the date above. If a change affects how we use information we already hold, we'll email account holders before it takes effect.