Privacy

Who is responsible

Teddy Verneuil, sole trader (entrepreneur individuel), 14 bis rue Magellan, 56860 Séné, France. Contact: hello@film36.app. Full details on the legal notice page.

What we collect

• Your photographs. They are saved on your phone when taken, then sent to our servers to be shared with the event’s other guests.
• The first name you enter when joining an event. It identifies you to the host. You choose what you write: nothing obliges you to give your real name.
• An anonymous identifier, created automatically the first time you open the app. It ties your photos to you without knowing who you are.
• Your Apple ID, only if you choose to link an account to find your events again on another phone. It is optional, and offered afterwards, never on the way in.
• The event’s dates and settings: its name, its hours, the film chosen.

We collect neither your location, nor your address book, nor your advertising identifier, and we never read your photo library: the permission requested to save your photos is write-only.

Why

To provide the service: gather an event’s photos, develop them at the appointed hour, and show them to the people who were there. The legal basis is the performance of the service you ask for by joining an event. No data is used for advertising, statistical or commercial purposes.

Who can see your photos

• You, always, for your own shots.
• The host, who sees all the photos in order to put together the shared selection.
• The other guests, only for the photos the host has kept and chosen to share.

Before developing time, nobody sees anything, not even the host, not even you. That is the principle of the service, and it is enforced by the server, not only by the app.

For how long

Photographs are kept for 7 days after developing, or 90 days for an Unlimited party, then destroyed automatically by a daily process. The deadline is shown in the gallery. After that, neither files nor traces remain.

The event itself (name, dates, participants) is kept until you delete your account.

Who hosts them

Supabase Inc., a processor within the meaning of the GDPR, on infrastructure located in the European Union. No other provider accesses the app’s data. The film36.app website is hosted by Cloudflare, Inc.; it collects no personal data and sets no cookies.

The album: what we collect

The album (app.film36.app and film36.app/a/…) works separately from the roll.

• For the couple: your email address, and your name if Google or Apple pass it on when you sign in with them; the album’s name, the wedding date and your settings; your purchases (amount, date, payment reference). We never receive your card details.
• For guests: the first name entered, the photos and videos uploaded (with the date they were taken) and an anonymous identifier, kept in the browser, used to find one’s own uploads again. No account, no email address.

The session is kept in the browser’s local storage, never in the page address. It is neither a cookie nor a tracker: it is what keeps you signed in.

The guest book

A guest book message contains the voice (and, for a video message, the image) of the person recording it: this is personal data.

• What we keep: the message file, its length, its date and the first name the guest typed. The message is recorded in the browser, kept on the phone for a while if the network drops, then sent to our servers.
• Who hears it: the couple, and its author. The couple’s greeting is heard by their guests. If the couple shares their guest book, the album’s other guests can hear it too (except messages the couple has hidden); if they turn on the slideshow for messages, they play on screen during the party, with the first name. Either way, guests are told before recording.
• For how long: until the album’s end date (12 months), then everything is deleted automatically. A guest can delete their message at any time before then; the couple can delete any message.
• The microphone and camera only turn on when you press the button to record, and turn off as soon as you stop. Nothing is recorded before.
• The kiosk: on the couple’s tablet, a guest without a smartphone can leave a message; their first name is optional, and with no signal the message stays in the tablet until it is sent. A 4-digit code stops anyone leaving the kiosk.

The album: who sees what

• The couple sees the whole album and moderates it.
• Guests see what the couple chose: the whole gallery, only their own uploads, or the couple’s selection. A hidden upload, or one awaiting approval, is visible only to the couple and to its author.
• Nobody else. The album is not public and its pages are not indexed by search engines.

The album: for how long

Until the album’s end date, shown in the couple’s space: 30 days after the wedding for the free version, 12 months for the full album and the guest book. On that date, files, uploads, guest book messages and guests’ first names are deleted automatically. Billing data (purchase, amount, date) is kept for ten years, as the law requires.

The album: our providers

• Supabase Inc.: database, files and sign-in, in the European Union.
• Stripe and Link: payment. Link is the seller of the full album and the guest book and processes your payment data under its own privacy policy.
• Resend: sending emails (sign-in code, confirmation, album ready, guest book ready), from the European Union.
• Google and Apple: only if you choose to sign in with them.
• Cloudflare, Inc.: hosting the pages.

None of these providers uses your photos, and no data is sold or used for advertising.

Your rights

You have the right of access, rectification, erasure, portability, restriction and objection. Two of them are exercised directly, without writing to us or waiting:

• Delete a photo: open it full screen, then “Delete this photo”. It disappears from everyone’s galleries and from our servers. This is final, and nobody but you can do it.
• Delete your account: from the settings. Your photos and your account are erased. The events you hosted continue to exist for their guests until their own deadline; we cannot erase other people’s photos at your request.

For the other rights, write to hello@film36.app. You may also lodge a complaint with the French data protection authority, the CNIL.

Security

Access is controlled at the level of the database itself, and not by the app: a photo that has not been shared stays out of reach even for someone who would bypass the app. Exchanges are encrypted in transit.

Children

Film 36 is not intended for people under thirteen and knowingly asks them for no data.

Changes

Any change to this policy will be published on this page, with its update date. A substantial change will be announced in the app.