Your event, your photos, on a schedule you control.

Momenti is operated by an individual trading as Momenti, based in Malta, who is the data controller for the information described on this page.

Your name, email and event details, including the event name, date, guest count and camera settings, are needed to run the event and process payment. Stripe handles payments. Momenti never stores your card number.

A display name you choose when joining, and the photos you capture. Guests never create an account and never provide a payment method. An email address is optional: you only give one if you ask us to tell you when the album is ready (next section).

On the album page a guest can choose to type an email address so we can tell them when their photos have developed. It is entirely optional and the event works the same without it. We use the address for that one email and nothing else: no marketing, and it is not shown to the host or to other guests. The email is sent through Resend, our email provider. We delete the address as soon as that email has been sent, when you opt out (the email has a one-click opt-out link, and you can also ask us at hello@momenti.photos before it is sent), or when the event is closed, deleted or expires, whichever comes first. We rely on your consent, which you can withdraw at any time.

Photos and event media stop being available 90 days after the event date and are then permanently deleted from storage, which can take up to about ten further days. Once deleted they cannot be recovered, so download anything you want to keep before then. If an event is refunded, it is closed straight away and everything is deleted 7 days later.

Guest display names are kept with the event record and are not deleted automatically when the photos are. Payment records are kept as long as accounting rules require. If you want a name or an account removed sooner, email us and we will delete it.

We'll email you a reminder two weeks before deletion. If you've already downloaded the full album export, we don't send it.

These providers process data on our behalf. None of them may use it for their own purposes.

• Cloudflare: hosts the website and processing queues, and stores photo files (EU region).
• Neon: hosts the database holding host emails, event details, guest display names and, until it has been used, a guest's optional album-ready email address (Frankfurt, EU).
• Stripe: processes host payments.
• Resend: sends transactional emails to hosts (payment confirmations, sign-in, export-ready notices, storage reminders) and the single optional "album is ready" email to guests who asked for it.
• Google: only if a host chooses to sign in with Google.
• Discord: receives internal operational alerts for the person running Momenti. These can include an event identifier but never photos or guest names.
• PostHog: product analytics, described below (United States).

Momenti sets only the cookies it needs to work: a secure sign-in cookie for hosts, and a private, event-specific session cookie for guests so your name, shot count and uploads are remembered during the event. We do not use advertising or third-party tracking cookies, so there is no cookie banner.

We use PostHog, hosted in the United States, to understand which pages and features people use and on which devices, so we can fix problems and improve the product. This is anonymous and cookieless for everyone, hosts included: nothing is stored on your device (no cookies, no local storage), and we do not identify or build a profile of you. A visit is only linked to the other pages you open during that same page load. We measure the pages you visit, the actions you take (like opening the camera) and coarse device details (browser, screen size bucket, connection type). Screen recording is switched off. As with any website, your IP address reaches PostHog's servers when your browser sends an event.

Names, email addresses, event names, guest names, private event codes, recovery or access codes, photo content, captions, or any other free text never reach our analytics tool.

Analytics events are retained in PostHog according to PostHog's standard Cloud retention terms, which we review periodically.

Hosts can control which of the (small number of) transactional emails they receive from their event dashboard settings.

If EU/UK data protection law applies to you, you have the right to request access to, correction of, or deletion of your personal data, and to object to or restrict certain processing. Event media is deleted automatically after the 90-day period described above. To exercise any of these rights, contact hello@momenti.photos. You also have the right to lodge a complaint with a data protection supervisory authority.

Questions about your data can be sent to hello@momenti.photos.