Privacy notice

Last updated 6 August 2026

FrameDate is a wedding-gallery service. This notice explains what personal data we hold, why, how long for, who we share it with, and the rights you have under the UK GDPR and the EU GDPR.

Who we are

FrameDate is the data controller for personal data described below. If you need to reach us about anything privacy-related, file a request via the form below or email privacy@framedate.com — both reach the same team.

What we collect and why

• Account data (email, display name, sign-in records, IP address of last sign-in): to let you sign in via magic link and run a wedding gallery. Legal basis: contract.
• Event content (photos, videos, audio messages, captions, EXIF dates, contributor display names): to host the gallery you or your guests uploaded. Audio guestbook messages are stored and shared with the couple exactly like other gallery media — we don't transcribe them or run any analysis on them. Legal basis: contract for organisers, legitimate interest for guests submitting content.
• Guest interactions (comments, emoji reactions, and — on galleries the host has opened to guests — the display name you register before browsing, with viewing timestamps and a random per-device identifier): to let guests take part in the gallery and to let the host see who has viewed their photos, which is how we keep an open gallery accountable if its link travels further than intended. We never see or store the identifier itself, only a one-way hash. Legal basis: legitimate interest (gallery security and the host's oversight of their own event).
• Payment metadata (amount, currency, status, Polar checkout/intent IDs — never card numbers): to take payment for Pro upgrades and gallery extensions. Legal basis: contract. Card processing itself is handled by Polar; we never see card numbers.
• Date of birth (hosts only): collected once, before you first host a gallery, to confirm you're 18 or over. We keep the date you gave and the time you confirmed it as a record that the age check was performed. Legal basis: legitimate interest (keeping the service adult-hosted), and it doubles as our evidence of the check.
• Audit log (your actions inside the admin pages, IP, timestamps): to keep the service secure and meet our obligations under Art. 32 GDPR. Legal basis: legitimate interest.
• Marketing email: only sent if you tick the opt-in on your account page. Legal basis: consent. Withdraw any time on the same page.

How long we keep it

• Active galleries: for the lifetime of the event plus the grace period configured for the tier.
• Archived galleries: deleted from cold storage once the grace period elapses.
• Comments, reactions, and viewer names: same lifetime as the gallery they belong to — removed when the event's data is deleted.
• Account profile: until you delete your account, or it goes 24 months without sign-in.
• Payment records: 7 years from the transaction date, for accounting and tax purposes.
• Audit log: 24 months from the action.

Who we share it with

• Cloudflare — hosting, edge compute, R2 object storage for the gallery media, transactional email delivery via the Cloudflare Email Routing send binding, and on-the-fly image resizing (we send the gallery image URL to Cloudflare's image transform endpoint so it can serve appropriately-sized variants to each device).
• Polar (payments, including refunds and chargebacks).
• Authorities, when legally compelled. We resist overbroad requests and notify you where the law allows.

Your rights

Under GDPR you have the right to access, correct, delete, port, restrict the processing of, or object to the processing of your personal data. You can also withdraw consent for marketing email at any time.

The fastest way to exercise these rights is from your account page — you can download a JSON export of everything we hold or delete your account outright. If you don't have an account (for example because you're a guest who uploaded to someone else's gallery), use the form below.

Cookies and similar technologies

We use a single session cookie for sign-in (strictly necessary — no consent banner required under PECR) and a short-lived cookie to remember PIN-unlocked galleries. We do not use advertising cookies, fingerprinting, or analytics that profile you.

For aggregate traffic measurement we use Cloudflare Web Analytics, which is cookieless and does not store IP addresses or use any device identifiers. A small script is loaded from static.cloudflareinsights.com to count page views and core web vitals; the data is reported only in aggregate.

Complaints

If you believe we've mishandled your data, you have the right to complain to your data protection authority. In the UK that's the ICO. In the EU, complain to the supervisory authority in your country of residence.