What we do with your stuff

The photos. They belong to you and the people you invited. We don’t market them, sell them, license them, or train anything on them. They’re stored so your castle works — that’s the whole reason they’re here.

Who sees them. The members of your castle — and their plus-ones, because we’re marvelous like that. That’s the entire guest list — and QR Castle’s staff, but only to fix a problem. (Like snooping around is not our scene, man.) There’s no public feed, no “discover,” no way for a stranger to wander in. When someone leaves or you remove them, their access goes with them.

What we collect, and why. The boring necessary things: your email (to reach you and send reminders), your name and the names you gave your people, and basic “did the email arrive” type records so we can tell if the plumbing works. Payment is handled by Stripe — we never see or store your card number; they’re the grown-ups for that.

Email reminders. We send them because prodding for pictures is what we do! With Glee!! Every one has an unsubscribe link, and it actually works.

Text messages. Only you can ask for them, on your own Profile page; nobody else in your castle, not even the owner, can sign you up. A few a month, such as the monthly reminder, a mid-month nudge, and a snark-off when you get around to adding photos. Reply STOP to any of them and they stop; reply HELP and we’ll tell you who we are. Message and data rates may apply. Your mobile number is used for these texts and nothing else. Really, really. We never sell it or share it with anyone for their greedy marketing schemes, and your ‘yes’ to texts is never shared with anyone either.

Cookies. Three. One keeps you logged in. One remembers who told you about us (and that’s just for 30 days!). And if you tap “Keep the castle”, one remembers you on that phone or computer until you log out. None of them follows you anywhere else. We’re not running an ad network out of your grandmother’s photo album.

Frankly, we’re a curious lot, yet forthcoming. On these public pages, a few lines tell us how long the page was on screen — that’s all. Really. No cookie, nothing saved on your device, and nothing that says who you are. We promise. We just want to know if anyone is reading our pretty prose - we worked so hard on these words. (Bossy A.I. wants to edit everything, but ya gotta draw the line somewhere, right?)

The server’s own notes. Every website keeps a log of who asked for what — ours records the address your request came from, for fourteen days, then throws it away. It’s how we spot someone trying to break in. We don’t look you up in it and it never leaves the machine.

Kids. Family photos include kids — of course they do. Those photos are private to your castle, same as everything else. QR Castle accounts are for adults (the organizer paying the bill); we’re not building profiles on children or letting them sign themselves up.

If you leave. Cancel and ask us to delete your castle, and we delete it — photos and all. Gone means gone. (One exception: backups. The server is copied daily (the database and photos, too!) — both age out within a fortnight. A deleted castle can linger in one until it does — and if we ever restored from a backup, we would delete it again.)

Changes. If we change how any of this works, we’ll tell you in plain English, not bury it in a 40-page update nobody reads.

Last updated 19 October 2026

Questions about any of this? support@qrcastle.com — a real person named David reads them, and if in a good mood, even answers them. See also the Terms.