How it works Weddings Corporate & events Pricing FAQ Our story

Privacy

Privacy policy

Plain words, no surprises. Last updated October 27, 2026.

The short version

  • We collect only what the game needs: guests' email addresses, names, an optional selfie, photos they take, and answers they write.
  • Only people who signed in to an event can see its photos. Nothing is public, and we never sell data or show ads.
  • Everything from an event is permanently deleted 90 days after the event ends.
  • Guests can delete their own data from an event at any time, and you have the rights the GDPR and similar privacy laws give you, wherever you are.

Who we are

StarrParty runs event games and shared photo albums for weddings and other events, on this website and in our iPhone and Android apps. This policy covers all of them. You can reach us through our contact form.

What we collect, and why

Guests

  • Email address and name, to sign you in with a one-time code, to show your name to other guests at the event, and to send you the gallery link and the final-thoughts email the event's hosts set up.
  • A selfie, only if you add one, so friends can recognize you. It's also included in the hosts' keepsake guest list.
  • Photos you take and answers you write in the game, to share with the event (as the hosts' settings allow) and to give the hosts their keepsake.
  • Game progress: quests completed, your team, your board.

Hosts and people who contact us

  • The host's email address, to set up and run their event.
  • What you send in our contact form (name, email, event details), so we can reply. It arrives as an email to us.

Technical data

  • On the website, a sign-in cookie that keeps you signed in to an event for up to 72 hours. We use no advertising or tracking cookies.
  • In our apps, the same sign-in is kept in your phone's secure storage (the Keychain on iPhone, the Keystore on Android), with the names of the events you've joined on that phone, so the app can reopen them. It stays on that phone. Removing an event from the app signs that phone out of it.
  • Our apps ask before using your camera, which they use only to take the photos and selfie you choose to add and to scan an event's QR code. Photos leave your phone only when you upload them. The apps contain no analytics, advertising or tracking. If you've chosen in your phone's settings to share diagnostics with app developers, Apple or Google may send us anonymous crash reports.
  • On this public website (not inside events), Cloudflare Web Analytics counts page visits so we know which pages help people. It uses no cookies and doesn't track you across other sites.
  • Your IP address is used briefly to prevent abuse (for example, too many sign-in attempts). Our contact form uses Cloudflare Turnstile to check you're not a robot.
  • When you sign in, a record that you agreed to our Terms of service: when, which version of the terms, and the IP address and browser or app you signed in from. It's kept with the rest of the event's data and deleted with it.

Who can see what

  • Other guests at the same event see your name, your selfie and the photos that are shared in the gallery.
  • The event's hosts and moderators see the guest list (names and emails), all photos including ones not shared, and all answers. Hosts can download them.
  • Nobody else. Events are private to the people who signed in.

Service providers

We use a small number of providers to run StarrParty. They handle data only to provide their service to us, under their data processing terms:

  • Cloudflare hosts the app and stores its data and photos, and provides Turnstile and our website analytics.
  • Amazon Web Services (SES) sends our emails.
  • Stripe processes payments. We never see or store card details.
  • Apple and Google deliver our apps through the App Store and Google Play, under their own privacy policies. We receive only anonymous download and crash statistics from them.

How long we keep it

  • Everything from an event (photos, selfies, answers, guest names and emails) is kept for 90 days after the event ends, then permanently deleted. It can't be restored. Hosts get a reminder a week before.
  • One-time sign-in codes are deleted within a day.
  • Contact form emails are kept in our inbox only as long as we need them to talk with you about your event.

Deleting your data

You can delete your data from an event yourself, at any time:

  1. In the event, open Me → Delete my data.
  2. We email you a code to confirm it's you.
  3. 24 hours later, everything you added to that event (your selfie, photos, answers and final thoughts) is permanently deleted, including from the hosts' keepsake. If you sign in to the event again before then, the request is cancelled.

Anything the hosts already downloaded before then can't be recalled. When you've left your last event, your account is deleted too. You can also ask the event's hosts, or us, to delete your data for you.

Your rights

Wherever you live, you can ask us to:

  • see the personal data we hold about you, and get a copy of it;
  • correct it (you can also change your name and selfie yourself, from Me);
  • delete it (see above, or ask us);
  • stop or limit how we use it, or object to a use.

Send us a request through our contact form and we'll respond within one month. If you're in the European Economic Area or the UK, these are your rights under the GDPR and UK GDPR, and you can also complain to your local data protection authority.

Why we use your data (legal bases)

  • To run the event you joined (sign-in, the game, the gallery, the hosts' keepsake and the emails about it): because you asked to take part, and the event's hosts arranged it for their guests.
  • Your selfie: only if you choose to add one; remove it any time.
  • Security and preventing abuse (rate limits, robot checks): our legitimate interest in keeping StarrParty safe.
  • The record of your agreement to our terms: our legitimate interest in being able to show what was agreed, and when.
  • Hosts' and enquirers' details: to provide the service they asked for and reply to them.

Where data is stored

Our providers may store and process data outside your country, including in the United States. Where data leaves the EEA or UK, they protect it with the safeguards the law requires, such as standard contractual clauses.

Your choices

  • Adding a selfie is optional, and you can remove it from your profile at any time.
  • You can ask the event's hosts, or us, to remove a photo from the gallery.

Children

StarrParty is meant for event guests old enough to have their own email address. Hosts decide whether photos are reviewed before they're shared.

Changes

If we change this policy, we'll update the date at the top of this page.