Overview
Moments is built on a simple belief: your photos and memories are yours. We collect only what we need to run the service and never sell or use your content for advertising or model training.
Information We Collect
Account Information
When you create a host account, we collect your email address through our authentication provider (Clerk). Guest participants do not need an account — they receive a temporary session token.
Photos
Photos uploaded by guests are stored on Cloudflare R2 infrastructure and delivered through event access links.
Event Data
We store event names, dates, settings, and participant counts to operate the service. This data is stored in our database and is not shared with third parties.
Technical Data
We collect standard server logs (IP addresses, browser type, timestamps) for security and abuse prevention. These logs are retained for no more than 90 days.
How We Use Your Information
- To create and manage events
- To store and deliver photos to event participants
- To prevent abuse and maintain security
- To improve the service through aggregated, anonymized usage analytics
What We Never Do
- Sell or rent your personal information to third parties
- Use your photos for advertising
- Use your content to train machine learning models
- Share your data with social media platforms
- Track you across other websites
Data Storage and Security
All photos are stored on Cloudflare R2 with encryption at rest. Account data is stored in Neon Postgres with encrypted connections. We use industry-standard security practices including HTTPS everywhere, secure session management, and regular security reviews.
Data Retention
Event photos and data are retained while the service is in beta. Self-service event deletion and a formal retention schedule are not available yet; contact the operator for a deletion request.
Guest Privacy
Guests join events without creating an account. We do not collect guest email addresses. Guest session tokens currently expire 90 days after they are issued and can stop working earlier if the event, invitation, or session is deactivated.
Cookies
We use essential cookies only — for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
Your Rights
You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at privacy@moments.app. We respond to all requests within 30 days.
Changes to This Policy
We will notify registered users by email of any material changes to this policy. The "last updated" date at the top of this page reflects the most recent revision.
Contact
Questions about privacy? Reach us at privacy@moments.app.