Privacy
Version 2026-08-15.draft-1
Placeholder — not legal text yet. The list below describes what the code actually does today, so the real policy can be written to match rather than guessed at.
What the system stores
- Photos. Two copies of each upload — a gallery thumbnail and a print-resolution version — both resized in your browser before they are sent.
- An optional uploader name and tags, typed by whoever uploaded.
- Orders. Buyer name, the six chosen photos, the text on the centre magnet, and optionally a phone number or email for the pickup notification. Card details are handled by Stripe and never reach MagnetStories.
- Consent records. Which terms version was accepted, when, and a salted hash of the IP address — not the address itself.
- Face descriptors, only if the event enables face grouping. A list of numbers derived from a face. No face image is stored. The photo you take for "Find me" is processed in your browser and never uploaded at all.
Who can see the gallery
Event portals are unlisted and can be protected with a PIN. They are not indexed and there is no public directory. Any photo can be reported by anyone, which hides it from the gallery immediately.