Privacy

KeepsakeCode is operated by HUIWANLI LLC, based in Los Angeles, California, United States. If you have a question about anything here, write to [email protected]. A person reads that address.

From guests — the photos, voice messages and written notes you choose to share, and the name you type (optional). Nothing is taken from your phone that you did not pick.

From hosts — the event name and date, the host name shown to guests, and an email address so we can send reminders.

Automatically— a short-lived cookie so we can tell your uploads apart from someone else's, your browser type, and a one-way scrambled version of your IP address. We keep the scrambled form, not the address itself; it is used to limit abuse.

If you sign in with Google — your name, email address and profile picture. This is optional and is not required to share anything at an event.

If you opt in to text updates — your mobile number, together with the time you gave consent and the exact wording you agreed to. This is entirely optional.

Photos, voice messages and prepared downloads are stored with Cloudflare R2. Uploaded videos may be processed and delivered through Cloudflare Stream, while downloadable video copies and thumbnails may be stored in Cloudflare R2. Event details, names and notes are held in our own database on a server we operate. Everything is stored in the United States.

• Full-size original photos and voice recordings — for the host's plan storage period (6 months, or 24 months on Plus) after the event. We email the host before they are removed.
• Uploaded videos — converted to a widely compatible HD MP4 (up to 1080p). Playable online for 6 months after the event or gift reveal; the downloadable copy follows the plan storage period above.
• The memory page — stays online after that with web-sized photos, so the QR code keeps working.
• Anything the host deletes — recoverable for 30 days, then permanently erased.
• Prepared ZIP downloads — 7 days, then deleted.

What you share goes to the host of that event. After the event, photos and notes may appear on the event's memory page. That page is at a hard-to-guess address and is blocked from search engines — but anyone the host gives the link to can open it. Please keep that in mind when sharing photos of other people.

Hosts can hide or delete anything shared at their event. We do not sell your information, and we do not use it for advertising.

Right now there is no self-service delete button for guests. If you want something you shared taken down, ask the host of the event, or write to [email protected] and we will remove it. We would rather say this plainly than promise a button that does not exist yet.

Hosts can delete their own event's content at any time from their dashboard.

If you choose to opt in — on our SMS sign-up page or from your event dashboard — we will send transactional text messages only: about your account, your event page, RSVP activity, event reminders and service updates. We do not send marketing texts. Message frequency varies, and message and data rates may apply depending on your carrier. Consent is not a condition of purchase.

SMS opt-in data and consent will not be shared with third parties for marketing purposes. Your number is used only to send you the messages you signed up for.

You can withdraw consent at any time: once messaging begins, reply STOP to any message (or HELP for help), or write to [email protected] and we will remove your number. We keep a record that you opted in (and out) — that record is how we prove we only text people who asked us to.

SMS notifications are being rolled out gradually; opting in today records your consent so texting can start when the feature is live for your account.

• Cloudflare — hosting, media processing, storage and content delivery.
• Resend — delivers our emails to hosts.
• Twilio — will deliver our text messages to people who have opted in, once SMS notifications launch.
• Google — only if you choose to sign in with Google.

We use three small cookies and no advertising or tracking cookies at all: one to recognise your device while you share at an event, one if you sign in with Google, and one for the site owner's admin login. Turning them off means sharing and signing in will not work.

KeepsakeCode is meant for adults organising and attending events. We do not knowingly collect information from children. Photos taken at a family event may of course include children — those are handled the same as everything else, and the host can remove them.

If we change how any of this works, we will update this page and the date at the top. If the change is significant, hosts with an active event will be emailed.