Privacy Policy

How we protect your data.

A full privacy policy is currently in the works. Until then, we want to be transparent about how we handle your data.

1. Data Controller

The data controller responsible for your personal data is Morten & Ane Kornum Harders.

2. Information We Collect

We collect the minimum amount of data necessary to provide our service:

  • Event Hosts: Name, email address, and payment information (processed securely by our payment provider).
  • Guests: The name you choose to provide and the photos you upload.
  • Technical Data: Basic technical information such as IP addresses, which are used solely for security, spam protection (via Mosparo), and rate limiting.

3. Purpose and Legal Basis

We process your data for the following purposes:

  • To provide and manage the photo-sharing service (Performance of a contract).
  • To process payments for event packages (Performance of a contract).
  • To maintain the security and integrity of our platform (Legitimate interest).
  • To analyze platform usage and improve our service using self-hosted analytics (Legitimate interest).

4. Data Storage

All data is stored on EU-owned and operated hardware (Hetzner) located in Nuremberg, Germany.

5. Self-Hosted Services

To ensure maximum privacy and control, we use self-hosted services (Umami for analytics and Mosparo for captcha). This means no data is sent to external providers like Google or other tech giants. We remain in full control of all personal data for both hosts and guests.

6. Third-Party Sharing

We generally do not share your personal data with any third parties. However, if you choose to use our AI assistant (eazyAI), certain information may be processed by Google Gemini. Please see the "AI Assistant" section below for details.

7. AI Assistant (eazyAI)

Our AI assistant, eazyAI, is powered by Google Gemini. By using eazyAI, you acknowledge that:

  • Greeting: When you first interact with eazyAI, we provide your name to the AI to allow for a personalized greeting.
  • Context: Continued use of the assistant may result in event-related information (such as event titles and descriptions) being provided to Gemini to provide better assistance.
  • User Input: Any personal information you voluntarily provide in your messages to eazyAI will be shared with and processed by Gemini.
  • Data Usage: Information shared with Gemini is used solely to generate responses for your requests.

8. Guest Data and Photos

  • Guest Names: Guests are identified only by the name they choose to enter. Your name is shared with the event host. If the host enables the "shared gallery" feature, your name will also be visible to other guests at that event.
  • Photos: Photos are stored securely and are accessible to the event host, who also has the right to share them. If the host enables the live gallery or photo wall feature, photos will be visible to other guests.
  • Privacy Note: Your name is never shown on the Live Wall (projector view). It is only viewable within the app's shared gallery view if enabled.

9. Data Retention

  • Event Data: Photos and guest names are automatically deleted once the event's selected retention period expires.
  • Host Data: Account information is retained as long as your account is active. You may request deletion of your account at any time.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • The right to access your data.
  • The right to have incorrect data corrected.
  • The right to have your data deleted ("the right to be forgotten").
  • The right to data portability.

11. Cookies

eazy.photo uses only necessary functional cookies. These are required to keep you logged in or to manage your active session. We do not use any tracking, advertising, or third-party cookies.

12. Children's Privacy

You must be at least 18 years old to create a host account. Guests who are minors should only participate with the consent of a parent or guardian.

13. Changes to this Policy

We reserve the right to update this policy at any time. Significant changes will be communicated to active hosts via email.

14. Right to Complain

If you believe we are processing your personal data incorrectly, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

15. Contact Information

If you have any questions about this Privacy Policy, please contact us:

Morten & Ane Kornum Harders
Email: mmh@harders-it.dk