What we do with your stuff

The photos. They belong to you and the people you invited. We don’t market them, sell them, license them, or train anything on them. They’re stored so your castle works — that’s the whole reason they’re here.

Who sees them. The members of your castle. That’s the entire guest list. There’s no public feed, no “discover,” no way for a stranger to wander in. When someone leaves or you remove them, their access goes with them.

What we collect, and why. The boring necessary things: your email (to reach you and send reminders), your name and the names you gave your people (so the castle isn’t a spreadsheet), and basic “did the email arrive” type records so we can tell if the plumbing works. Payment is handled by Stripe — we never see or store your card number; they’re the grown-ups for that.

Email reminders. We send them because prodding for pictures is what we do! With Glee!! Every one has an unsubscribe link, and it actually works. (One day we may offer text-message reminders too; if we do, same rule — you opt in, you can always opt out.)

Cookies. Two. One keeps you logged in. The other remembers who told you about us (and that’s just for 30 days!). Neither follows you anywhere else. We’re not running an ad network out of your grandmother’s photo album.

The server’s own notes. Every website keeps a log of who asked for what — ours records the address your request came from, for fourteen days, then throws it away. It’s how we spot someone trying to break in. We don’t look you up in it and it never leaves the machine.

Kids. Family photos include kids — of course they do. Those photos are private to your castle, same as everything else. QR Castle accounts are for adults (the organizer paying the bill); we’re not building profiles on children or letting them sign themselves up.

If you leave. Cancel and ask us to delete your castle, and we delete it — photos and all. Gone means gone. (One exception: backups. The server is copied daily (the database and photos, too!) — both age out within a fortnight. A deleted castle can linger in one until it does — and if we ever restored from a backup, we would delete it again.)

Changes. If we change how any of this works, we’ll tell you in plain English, not bury it in a 40-page update nobody reads.

Last updated 20 July 2026

Questions about any of this? support@qrcastle.com — a real person named David reads them, and if in a good mood, even answers them. See also the Terms.