Privacy Policy
Last updated: October 6, 2026.
MomentStash provides event owners with tools to collect, organize, display, and download photos and videos contributed by their guests. This Privacy Policy explains the personal information MomentStash processes when an event owner, guest, or visitor uses the service.
Information we collect
Account and customer information. We may collect a customer's name, email address, password hash, event details, plan and service selections, event settings, branding, billing or invoice identifiers, support communications, and records showing acceptance of our current policies. We do not store plaintext account passwords.
Guest contributions. Guests may provide first and last name, captions, photos, videos, and other media. Original media can contain metadata embedded by the guest's device or software. A guest account is not required.
Technical and security information. We may process IP address, browser or device information, request timestamps, essential cookies or identifiers, upload state, file size and type, integrity hashes, security events, rate-limit information, storage-verification records, and application or infrastructure logs.
Payment and fulfillment information. When payment or physical fulfillment is used, we may process invoice references, plan and order details, shipping information, and payment-status information. If a third-party payment processor is used, payment-card details are handled by that processor rather than stored directly by MomentStash unless expressly stated otherwise.
How we use information
We use information to create and secure accounts; review plan and service requests; provision and operate event pages; receive, verify, preserve, replicate, display, and deliver event media; provide dashboards, exports, QR codes, signs, slideshows, and photo walls; communicate about accounts and events; provide support; prevent abuse; troubleshoot problems; maintain backups and service reliability; fulfill orders; and comply with legal obligations.
MomentStash does not sell personal information or event media to advertisers. We do not use event media for advertising or train advertising profiles from it.
Event owners and event displays
Information uploaded to an event is made available to the event owner. This can include the guest name, caption, file name, and uploaded media. Depending on the event owner's settings, approved photos may also appear on an event slideshow, photo wall, or other event display visible to attendees. Guests should upload only content they are comfortable sharing with the event owner and, when applicable, event attendees.
Originals, derivatives, and storage
MomentStash is designed to preserve original uploads. We may also create technical derivatives such as thumbnails, previews, or web-compatible video copies so the service can display or stream media efficiently. Derivatives do not replace the stored original.
For reliability, verified copies of media may exist on more than one storage system. Storage, replication, backup, and monitoring systems may be operated by MomentStash or by service providers acting for MomentStash.
Cookies and similar technology
MomentStash uses essential cookies and identifiers for functions such as account sessions, security, event access, resumable uploads, and distinguishing guest upload sessions. These are used to operate and protect the service. MomentStash does not currently use advertising cookies or cross-site behavioral advertising trackers on event upload pages.
Optional Google Photos export
If an event owner chooses to connect Google Photos, MomentStash receives and stores an OAuth refresh token so it can complete user-requested exports. The refresh token is encrypted at rest. MomentStash requests write-only Google Photos access for creating new media and app-created albums and does not use that connection to browse the owner's existing Google Photos library. When an export is requested, selected original media, filenames, and user-provided captions may be transmitted to Google for placement in the owner's Google Photos account. Disconnecting Google Photos removes the stored MomentStash connection token but does not delete media already exported to Google.
Google Photos API data and Limited Use
Data accessed. MomentStash requests only the Google Photos permission needed to add user-requested event media to the Google Photos account an event owner connects. MomentStash receives OAuth credentials, app-created album and media identifiers, and API responses necessary to complete and report the requested export. MomentStash does not read, browse, search, analyze, aggregate, or derive information from the user's pre-existing Google Photos library.
Data use. Google Photos API data is used only to provide and maintain the visible Google Photos export feature requested by the event owner, including connecting the account, creating app-created albums, adding selected event media, reporting transfer status, and opening the resulting album.
Data sharing and transfer. MomentStash does not sell Google user data, use it for advertising, share it with data brokers, or transfer it to third parties for unrelated purposes. Event media is transmitted to Google only when the event owner explicitly asks MomentStash to copy that media into Google Photos.
Protection. Google OAuth credentials are transmitted over encrypted connections and stored encrypted at rest. Access is limited to systems and personnel that require it to operate or secure the feature.
Retention and deletion. The encrypted Google Photos connection token is retained only while the event owner keeps Google Photos connected or as otherwise needed for a user-requested transfer in progress. Disconnecting Google Photos removes the stored connection token from MomentStash. MomentStash does not retain a copy of the user's existing Google Photos library because the service does not read that library. Media already copied into Google Photos remains in the user's Google account unless the user manages it there.
AI and machine learning. MomentStash does not use Google Photos API user data, whether raw, aggregated, anonymized, or derived, to create, train, or improve AI or machine-learning models, and does not transfer Google Photos API user data to third-party AI or machine-learning services for model training.
Limited Use. MomentStash's use of information received from Google Photos APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers
We use vendors and infrastructure providers to help operate the service. Depending on the feature, these may include Cloudflare for DNS, network delivery, and security; Resend and its infrastructure for transactional email; payment providers when payment processing is enabled; and infrastructure, monitoring, storage, shipping, or fulfillment providers. They receive information only as needed to provide their services and are governed by their own agreements and privacy obligations.
When we disclose information
We may disclose information to the applicable event owner; to service providers operating the service for us; when a customer specifically directs us to do so; to protect the security, rights, or safety of MomentStash, customers, guests, or others; or when required by law, legal process, or a valid government request. If the business or service is reorganized, acquired, or transferred, information may transfer as part of that transaction subject to applicable law.
Retention
Unless a package or written agreement says otherwise, guest uploading is scheduled to close 90 days after the event date or final event day, and standard owner gallery access is scheduled through twelve calendar months after that date. Event owners are responsible for downloading originals they want to keep permanently before their gallery period ends.
After the applicable retention period, event content becomes eligible for removal. Replicas, backups, security records, and logs can remain for additional limited periods while they age out, are overwritten, or are retained for security, dispute, accounting, or legal reasons. Temporary exports and staging data generally expire sooner. Account, transaction, and audit records may be retained as reasonably necessary to operate the account, document transactions and policy acceptance, prevent fraud, resolve disputes, and meet legal obligations.
Security
MomentStash uses technical and organizational controls intended to protect customer accounts and event media, including encrypted web connections, hashed passwords, access controls, request validation, integrity checks, restricted administrative access, rate controls, storage verification, and monitoring. No internet or storage system can guarantee absolute security.
Your choices and privacy requests
Event owners can manage event visibility and media through their account. A guest who wants an upload corrected, hidden, or removed should contact the event owner or MomentStash with enough information to identify the event and upload. Account holders may request access, correction, or deletion of personal information where applicable.
Depending on where you live, privacy law may provide additional rights such as access, correction, deletion, portability, restriction, objection, or appeal. We will honor applicable rights after reasonably verifying the request. MomentStash does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are used in certain U.S. state privacy laws.
Children
MomentStash is not directed to children under 13, and customer accounts are intended for adults or people who have reached the age of majority required to enter the applicable agreement. Event media may incidentally depict minors. Uploaders are responsible for having any permission or authority required to share media depicting other people, including minors.
Processing in the United States
MomentStash is operated from the United States. Information may be processed and stored in the United States and in other locations where our service providers operate, subject to applicable law and contractual safeguards.
Changes to this policy
We may update this policy as the service, vendors, or legal requirements change. Material changes apply prospectively, and the date at the top identifies the latest published version.
Contact
Privacy questions or requests can be sent to [email protected].