Privacy Policy

Information we collect

We collect organizer email addresses, event details, settings, collaborator permissions, and records needed to administer organizer sessions. From guests, we may collect an optional display name, consent records, an event-scoped identity selector, and information associated with contributions. Guests can browse an available event without creating an account or accepting contributor consent.

Event content

The service stores photos, videos, audio and video guestbook messages, written guestbook entries, captions, reactions, albums, and related processing information submitted for an event. Files and text may contain personal information supplied by contributors. Organizers can view originals and exports where their access and event entitlements permit.

Authentication, cookies, and technical records

Organizers sign in using single-use passwordless links and a secure HTTP-only session cookie. Guest contribution management uses an event-specific, non-secret selector in local storage and a corresponding secret in a secure HTTP-only cookie. We also process IP-derived rate-limit signals, browser and request information, security and authentication audits, and bounded operational logs. Private capabilities, signed media URLs, filenames, and contribution text are not intended to appear in telemetry.

How we use information

We use information to provide and secure private event galleries; receive, inspect, process, display, moderate, organize, deliver, and export contributions; authenticate organizers; remember guest contribution ownership on the same browser; enforce event settings and limits; prevent abuse; troubleshoot failures; and comply with applicable law.

Published content and current display-name attribution may be visible to people who possess the event or album link, subject to event settings and moderation. Organizers and authorized collaborators can access event administration and content according to their roles. We may disclose necessary information to approved hosting, database, private-storage, email, media-processing, security, and support providers acting for us, or where disclosure is legally required. We do not make event galleries publicly searchable.

Storage, security, retention, and deletion

We use access controls, private object storage, short-lived delivery operations, audit records, and other administrative and technical safeguards appropriate to the service. No Internet service can guarantee absolute security. Event retention depends on the applicable plan, event lifecycle, and any extension shown to the organizer. Prepared export archives are available for seven days. Deletion is performed asynchronously across active records, originals, derivatives, and prepared exports. Residual copies may remain temporarily in restricted backups until those backups are rotated or deleted. Backup copies are not restored for ordinary service use after a valid deletion request unless required for security, legal compliance, or disaster recovery.

Access, correction, and deletion requests

Subject to applicable law, you may request access to or correction of personal information about you, withdraw consent where applicable, or request deletion. An organizer can manage event content and access through the service. A guest can delete contributions linked to the same event-scoped browser identity; clearing browser data or changing devices may remove that ability. Send privacy requests to privacy@mutualmoment.com. We may need information to verify the requester and the relevant event.

Processing outside Quebec

The current application and database infrastructure operates in Toronto, Ontario. Event media is stored with Cloudflare R2 using an Eastern North America location hint, which is a best-effort placement and not a Canadian residency guarantee. Brevo is the intended transactional email provider and, when enabled, stores email-service data in the European Union. Namecheap processes domain and DNS-related information on United States-based systems. Information may therefore be processed outside Quebec and Canada, where different laws may apply. Before public launch, the operator must complete the required privacy impact assessments and written provider-agreement review. Only information necessary to provide each service is to be shared.

Contact and policy updates

The Person Responsible for the Protection of Personal Information at 9578-5838 Québec inc., doing business as Mutual Moment Media, can be reached at privacy@mutualmoment.com. General support is available at support@mutualmoment.com. We may update this policy as the service or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when required by law.