Privacy notice
Updated 16 October 2026
EventMemory is operated by Shevel Semen, a self-employed operator in the United Kingdom, under PhotoMonkey. For questions about your information, contact sem.photomonkey@gmail.com. You can also use the PhotoMonkey contact form.
Information we process
- Account details: your email address and a password hash if you create a password. Passwords are stored as hashes, not as readable passwords.
- Social sign-in: if you choose Google or Facebook, the provider's account identifier and email address when supplied. We use the identifier to recognise your account. We do not store provider access or refresh tokens.
- Events: names, dates, event types, language, appearance and guest settings, account ownership, status and usage counters.
- Event media: photos, videos and written wishes, an optional guest name, upload identifiers, moderation decisions and likes. We store uploaded files and the previews or converted versions used by the gallery, wall and mosaic. Organisers may also upload a logo or mosaic reference image.
- Security: sign-in sessions, temporary OAuth attempts, rate-limit records, and audit records of account and event actions.
- Requests: information you send when contacting us about your account or privacy.
Why we use it
We use this information to sign you in, keep your events associated with your account, save your settings, collect and display event contributions, create mosaics and downloads, answer requests and protect the service. Account and event processing supports the service you request. Security processing helps us prevent unauthorised access and misuse.
Sharing event contributions
Guests do not need an account. People who receive the event links or QR code can view the public pages enabled by the organiser. With moderation enabled, new posts are not public until approved. The organiser controls gallery access, guest downloads and likes. A QR or event link is not a password; share it only with people you intend to invite.
Cookies and browser storage
EventMemory uses essential cookies for account sessions and temporary social sign-in verification. Account sessions expire after seven days; temporary OAuth attempts expire after ten minutes. Your selected language and guest identifiers used for uploads or likes may be saved in your browser's local storage.
Service providers
EventMemory uses Railway to host the application, database and event files. Our hosting provider may process information outside your country. If you choose Google or Facebook sign-in, that provider also processes information for the sign-in under its own policies. Requests made through the PhotoMonkey contact form are handled through that site's contact system.
How long information is kept
Account details remain available so you can return to your events. An event receives six calendar months of access from its first activation. When that period ends, its public pages and uploads are blocked. Deleting an event removes its media and event data from the active service; payment records, if any, are kept separately. Automatic physical cleanup after expiry is not enabled in this beta, so expired files remain restricted until the organiser or service operator deletes the event. There is no automatic account deletion. You can also request deletion using the instructions below. Temporary authentication records have expiry times; expired records are cleared as the service runs.
Your choices and requests
You can request access to, correction of or deletion of your account information by emailing sem.photomonkey@gmail.com. We may ask you to confirm that the account is yours before acting on a request. Requests are handled manually.
You may also ask us to restrict processing or object to our use of your information where applicable. If you have a concern about our handling of your information, contact us. You can also contact the UK Information Commissioner's Office.
Support requests
When you use the contact form, we process your name, email and message to answer your request. Support requests are retained for up to 90 days and are not added to a marketing mailing list.