Privacy Policy
Last updated: August 9, 2026
Kaptr lets hosts collect photos and videos from event guests via a QR code — guests upload without creating an account, and hosts review everything before it's shared. This page explains what we collect from both sides, why, and how to get it removed.
What guests share
When you scan an event's QR code and use the camera, we collect:
- The photos and videos you capture or upload, including any location or device data embedded in the file (EXIF metadata) by your phone.
- The first name you type in when you join — stored on your own device only (browser local storage), not sent to us until your first upload.
- A random session ID, set as a cookie in your browser (
kaptr_gsid), so we can tell your uploads apart from other guests' and enforce the host's photo limit. It doesn't identify you by name or track you across other sites. - If you enable notifications, a push subscription token tied to your browser.
Nothing you upload is visible to other guests or the public until the host approves it. Rejected uploads are deleted from our storage, not just hidden.
What hosts share
Hosts sign in with an email address through our authentication provider, Clerk. We store the events you create (name, date, settings) and the guest media you moderate, tied to your account.
About photos of other people, including minors
Guests can photograph anyone at the event, including people who haven't individually consented to Kaptr. The host's approval step exists specifically to catch anything inappropriate before it's shared — hosts are responsible for moderating with that in mind. Anyone who appears in a photo and wants it removed can contact us (see below) whether or not they created the event or have any account with us.
Who we share data with
- Supabase — hosts our database and stores uploaded media files.
- Clerk — handles host sign-in and account security.
- Canva — only if a host connects their account to design event signage; we never share guest photos with Canva.
- PostHog — anonymized product-usage analytics (which pages get used, not who used them). No guest name, email, or photo content is ever sent as analytics data.
We never sell data, and we don't run advertising of any kind.
How long we keep it
Approved event media is kept for as long as the host's account and event remain active, so hosts can keep coming back to their gallery. Rejected uploads are deleted at the time they're rejected. If a host deletes their account, their events and associated guest media are deleted along with it (see below).
Your rights
You can ask us to delete your data or any specific photo at any time — see account and photo deletion. Hosts can delete their own account directly from Settings. If you're a guest, or want a photo of yourself removed from someone else's event, email us and we'll handle it directly.
Contact
Questions about this policy, or a request about your data: hello@getkaptr.app.