Privacy policy

Draft – last updated 2 November 2026. The Swedish version prevails.

Snap9, a sole proprietorship (enskild firma) in Sweden, Patentgatan 8, 722 26 Västerås, Sweden is the controller. Contact: support@snap9.app.

Data we process

• Event: name, date and welcome text entered by the host.
• Uploads: photos and videos (may show people), file names and any name a guest types.
• Security: a one-way hashed (pseudonymised) IP address to limit abuse and handle reports.
• Payments: handled by Stripe; we never receive your card number.

Purposes and legal bases

• Providing the service – contract (Art. 6(1)(b) GDPR).
• Preventing abuse and handling illegal content – legitimate interest and legal obligation (Art. 6(1)(f), (c)).
• Bookkeeping – legal obligation.

Retention

Events and uploads are deleted automatically at the end of the plan period (free 14, Standard 180, Plus 365 days) or earlier if the host deletes them. Payment records are kept 7 years (Swedish Bookkeeping Act).

Processors

Cloudflare, Inc. (hosting/storage) and Stripe (payments). Transfers to the US may occur under the EU–US Data Privacy Framework and/or Standard Contractual Clauses. Anyone with a gallery link can view its content.

Cookies

Only strictly necessary cookies (language, host dashboard login). No tracking or ads.

Your rights

Access, rectification, erasure, restriction, portability and objection. If you appear in a photo and want it removed, use “Report” or email support@snap9.app. You may complain to the Swedish Authority for Privacy Protection (IMY), imy.se.