Privacy Policy

Who We Are

UploadTheDay (“we”, “us”, “our”) is an event photo and video sharing service operated in the United Kingdom. We provide a simple way for event hosts to collect photos and videos from their guests via a shared gallery link or QR code.

What Data We Collect

We collect the minimum data necessary to provide our service:

• Event hosts: Event name, optional event date. A 6-digit PIN is generated for event management — we do not collect host email addresses or require account creation.
• Guests: Name and email address (provided voluntarily when uploading). This information is visible only to the event host.
• Uploaded media: Photos and videos uploaded by guests, including file metadata (file name, type, size, upload timestamp).
• Technical data: Standard server logs including IP addresses, browser type, and access times for security and service reliability purposes.

How We Use Your Data

• To provide the event photo sharing service as described
• To display uploaded media in the event gallery
• To allow event hosts to manage their events and download media
• To maintain service security and prevent abuse

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for advertising or profiling.

Where Your Data Is Stored

Our database infrastructure is hosted by Supabase with data centres in the European Union. Uploaded media files are stored securely using cloud storage services. All data transfers are encrypted in transit using TLS/SSL.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Data Retention

Event data, guest information, and uploaded media are retained for as long as the event exists. When an event host deletes their event, all associated data — including guest details and uploaded media — is permanently removed from our systems.

We reserve the right to delete events and associated data that have been inactive for more than 12 months.

Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Restriction — request we limit processing of your data
• Portability — request your data in a portable format
• Objection — object to processing of your data

Event hosts can exercise data rights by deleting their event through the host dashboard. Guests can contact the event host to request their data be removed, or contact us directly.

Cookies

We use localStorage (not cookies) to remember your guest information for a smoother upload experience when returning to the same event. This data is stored only in your browser and is not transmitted to our servers beyond the initial registration. We do not use tracking cookies or third-party analytics.

Children's Privacy

Our service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

Contact Us

If you have any questions about this privacy policy or wish to exercise your data rights, please contact us at privacy@uploadtheday.co.uk