Privacy Policy

Last updated 3 October 2026

Pixèsta lets the guests of an event share photos, videos and messages with its host by scanning a QR code. This policy explains what information Pixèsta collects, why, who can see it and how long it is kept. "We" and "us" mean the people who run Pixèsta.

Two kinds of people use Pixèsta

Hosts create an account, set up an event and receive what guests share.
Guests open an event from its QR code or link and share photos, videos and messages. Guests do not create an account.

The host decides to collect photos and messages at their event and what happens to them afterwards. We store and process them on the host's behalf.

What we collect from guests

The name you type when you open the event. It is shown with what you share.
The photos and videos you upload. Most photos are compressed on your phone before they are sent, which removes details your camera embeds in the file, such as where it was taken. Videos, and photos that cannot be compressed, are uploaded as they are and may still contain those details.
The messages you write for the host.
A random code kept in your browser so the event recognises you when you come back on the same device. "Change name" on the event page removes it.

What we collect from hosts

Your name, email address, country and password. The country decides the currency prices are shown in. The password is stored in a scrambled (hashed) form that we cannot read.
While you sign up, we hold those details and email you a code to confirm the address is yours. Your account is only created once you enter the code.
Your events: their name, date, time zone, settings, albums and any music you add.
When you pay for a plan, you pay on the site of our payment provider, Stripe. Your card details go to Stripe and never reach us. We keep a record of what was paid for which event, and Stripe keeps your name and email address as its customer.
Cookies needed to keep you signed in, and, if you choose "Remember me", one that remembers your email address on the sign-in page.

What we collect from everyone

Like any website, our servers receive your IP address and the type of browser you use. We use them to keep the service secure, to limit abuse and to fix problems. The country your IP address is in decides the currency our prices are shown in; we do not store it. We look the country up on our own server, with IP Geolocation by DB-IP.

We do not use advertising or tracking cookies, and we do not sell personal information.

Who can see what is shared

The host sees everything shared at their event, with the name of the guest who shared it.
Anyone with the event's QR code or link can see the photos, videos and messages the host has approved, for example on the slideshow shown at the venue. A host can add a PIN and can require their approval before anything is shown.
The host can download the photos, videos and messages, and create a video of the slideshow. What the host does with those copies is their responsibility, not ours.
Our service providers store and deliver the data for us: a hosting provider for the website and database, Cloudflare for storing photos, videos and music, and Stripe for taking payments. They may keep data in countries other than yours.

We disclose information to others only when the law requires it.

How long we keep it

Photos, videos and music are deleted automatically when the event's hosting ends: between 7 days and 12 months after the day of the event, depending on the event's plan. Hosts see a reminder on their dashboard before then.
Event details, guest names and messages are kept until the host deletes the event.
Uploads that were started but never finished are deleted after 24 hours.
Records of payments are kept for as long as the law requires, as are Stripe's own.
Sign-ups that were started but never confirmed are deleted a day after their code runs out.
A host can delete any photo, video or message, a whole event, or their account at any time. Deleting an account deletes its events and everything in them. Deleted items cannot be recovered.

Your choices

Guests: to have something you shared hidden or deleted, ask the host of the event, who can do it straight away. If you cannot reach them, write to us and we will help.
Hosts: you can change your name, email address and password, and delete your events or your account, from your dashboard.
Depending on where you live, you may have the right to ask for a copy of your information, to have it corrected or deleted, or to object to how it is used. Write to us to use these rights.

Photos of other people

Photos from an event usually show other people. Please share only photos and videos you took yourself or have permission to share, and be considerate of the people in them, especially children.

Children

Host accounts are for adults. Children should use Pixèsta as guests only with the agreement of a parent or guardian.

Security

Event links are long and hard to guess, connections are encrypted, and passwords and PINs are stored in hashed form. No system is perfectly secure, so we cannot promise that information will never be accessed without permission.

Changes to this policy

If we change this policy we will update this page and the date at the top.

Contact

Questions about this policy or your information: hello@pixesta.com.