compact.cam — Privacy Policy
Effective: 2026-10-17
This policy is issued by Konstantin Lebedev, an individual entrepreneur registered in Georgia ("we", "us"), who is responsible for the processing described here as the controller. Contact: support@compact.cam. We process personal data under the Law of Georgia on Personal Data Protection. Where the EU or UK GDPR applies to the data of people in the European Union or the United Kingdom, you also have the rights it gives you.
In short
compact.cam has no accounts. A host creates a film; guests take photos with their phones; nobody sees the photos until the film develops; then everyone with the film's link can see and download them. We keep the photos and a few technical records about the film for 90 days after it develops (12 months on a paid plan) and then delete them. We use no third-party analytics, ads or trackers; we only count a few steps in the life of each film. We do not sell data, we do not run face recognition, and we do not use photos to train any model.
Whose data this covers
- Hosts, who create a film.
- Guests, who take photos on a film.
- People who appear in the photos, whether or not they used compact.cam.
- Buyers of a paid plan.
- Anyone who writes to us.
What we process, and why
| Data | Whose, and where it comes from | Why | Legal basis |
|---|---|---|---|
| The film: its name, the develop time, the number of shots per guest, the guest limit, the look, the plan, when it was created, developed and paid for; the host link and the guest link codes | the host | to run the film | performing our contract with the host |
| A guest's camera: a random identifier and secret, the number of shots used, when the guest joined | created when a guest takes the camera | to keep each guest's shot count and let them delete their own photos | performing our contract with the guest |
| A guest's name, if they add one (it is optional) | the guest | to show who took each photo, in the album and in the archive | performing our contract with the guest |
| Photos, with their size, width, height and the time they were received | guests | to show them in the album after the film develops and to put them into the archive | performing our contract with the host and the guests |
| What the photos show: the people in them | guests, about the people they photograph | the same | the legitimate interest of the host and guests in keeping the photos of their event, and ours in running compact.cam (see "People who appear in photos") |
| Technical records of each upload: attempt numbers that stop a photo being counted twice after a lost connection, and numbers of photos a browser reports as not yet confirmed | the guest's browser | to deliver each photo once and to see how many photos get lost | our legitimate interest in a service that does not lose or double-count photos |
| Steps in the life of a film: created, guest link first opened or card printed, first photo, paid, developed, each with a date | the service | to see how compact.cam is used | our legitimate interest in improving compact.cam |
| A purchase: Creem's order identifier, the plan, the film it is for, the amount and dates | Creem | to apply the plan to the film and handle refunds | performing our contract with the buyer |
| Sales records: the order, the plan, the amount, the date, and the buyer's name, email address and billing details as Creem shows them in our seller account | Creem | to keep the records our contract with Creem requires and to defend claims and chargebacks | our legitimate interest in meeting that contract and defending claims |
| Your emails to us and our replies, including your email address | you | to answer you and to handle requests and reports | performing our contract with you; for reports about content, our legitimate interest and duties as a host of other people's photos |
Giving your name as a guest is optional. Without the data in the other rows we cannot run a film, apply a paid plan or answer you.
Photo metadata. Before a photo leaves the guest's phone, the compact.cam page resizes it to at most 2400 pixels on the long side, applies the film's look and saves it as a new JPEG. Location and camera details stored inside the original photo (EXIF) are not copied into it, so photos taken through the page reach us without them, and the original file is never sent.
IP addresses. Our code does not store IP addresses. Cloudflare, which runs compact.cam, processes them to deliver and protect the site (see "Our providers").
Who sees the photos, and when
- Before the film develops, after a one-second preview on the guest's own screen, nobody can see the photos in compact.cam: not the guest who took them, not other guests, not the host. The host panel shows only how many guests have joined and how many shots have been taken.
- After the film develops, everyone who has the film's link can see the album, the names guests added, and download the archive. The album is not listed anywhere and search engines are told not to index it, but it has no password.
- We do not look at photos. Stored photos are technically accessible to us; we open a specific photo only to handle a report or a request about it, or when the law requires.
People who appear in photos
Guests photograph other people at the event. Those people did not give us their data themselves, and we usually have no way to contact them, so this policy is how we inform them. We rely on the legitimate interest of the host and the guests in keeping photos of their own event, and on ours in providing the camera. The safeguards: the album is closed until the film develops and is open only to people with its link, it is not indexed, it is deleted after 90 days or 12 months, we do not analyse faces, and anyone can have a photo of themselves removed (see "Your rights"). The guest screen tells every guest that the people at the event will see what they shoot after it develops.
What stays on your device
- Guests: one cookie per film (named
g_and the film code) that keeps your camera, so the shot count and your right to delete your own photos stay with you. It lasts up to 400 days. The browser also keeps, in its local storage, the numbers of photos it has taken but not yet seen confirmed, until the server confirms them, and, for the current tab only, a count of the automatic reloads that open the album at the develop hour. - Hosts: the browser keeps, in its local storage, a list of the films you created (name, develop time, host link and guest link) so you can find them again on the same device, and a note that you pressed Save the key. We do not receive this list.
These are needed for compact.cam to work. We set no other cookies and run no analytics, advertising or tracking scripts.
If you press Google Calendar on a film page, your browser opens Google Calendar with the film's name, the develop time and the album link; what Google does with them is under Google's own terms. The Add to calendar file is downloaded from us and contains the same three things.
Buying a paid plan
Creem sells paid plans as merchant of record. Creem collects your name, email address, billing address and payment details, runs the charge and any refund, and handles tax, as an independent controller under its own privacy notice. We never see your card details. In our seller account at Creem we see the order, including the buyer's name, email address and billing details; we use them only to handle your purchase and your requests about it.
Our providers, and where data is processed
| Provider | What it does for us | Where |
|---|---|---|
| Cloudflare, Inc. | runs the website and service (Workers), stores photos (R2) and our database (D1), forwards email sent to support@compact.cam | photos and the database are stored in Cloudflare's Eastern Europe region; requests are handled in the Cloudflare data centre nearest to the visitor, which can be in any country, including the United States |
| Creem (Armitage Labs OÜ, Estonia) | sells paid plans as merchant of record | under Creem's own privacy notice |
| Our email provider | keeps the mailbox where your emails to support@compact.cam arrive | under that provider's terms |
Cloudflare processes data for us under its Data Processing Addendum (version 6.4 of 3 April 2026), which includes the EU standard contractual clauses; Cloudflare states that it complies with the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards that apply to your data at support@compact.cam.
How long we keep each kind of data
| Data | Kept until |
|---|---|
| Photos, guest names and cameras, the film and its technical records | 90 days after the film develops (free) or 12 months after it develops (paid plan), or earlier if the host deletes the film; deletion runs once a day |
| A single photo deleted by the host, the guest who took it, or us | the photo file is deleted at once; a technical record of it (its identifier, size, time and which guest camera sent it, without the image) stays until the whole film is deleted |
| Copies in our database provider's history | deleted database records can remain in Cloudflare's point-in-time history of the database for up to 30 days; photo files have no such copies |
| The purchase record linked to a film | with the film |
| Sales records in our seller account at Creem and in our accounting records | 7 years after the purchase, as our contract with Creem requires |
| Your emails to us and our replies | 3 years after the last message |
Your rights
You can ask us to tell you whether we process data about you and to give you a copy of it, to correct it, to stop processing it, to delete it or to block it, and, where the law gives you that right, to receive it in a portable form or to object to its use. Write to support@compact.cam. Tell us the album link and which photo or what data your request is about; we may ask for details that show the request is yours. We answer within 10 working days; for a copy of your data or information about it, in a complex case we may need up to 10 more working days and will tell you so. If you ask us to block a photo or other data while we consider your request, we tell you our decision within 3 working days.
- To remove a photo that shows you, or a photo you took, send the album link and say which photo. We delete it unless the law requires us to keep it, and tell you when it is done.
- Guests can also delete their own photos themselves from the album, in the browser they took them with. To change or remove the name under your photos, write to us.
- Hosts can delete any photo or the whole film from the host album after it develops.
If you are not satisfied, you can complain to the State Audit Office of Georgia, which supervises data protection in Georgia, and, if you are in the EU or the UK, to the data-protection authority of the country where you live or work. For data that Creem holds as the seller, use Creem's own process in its privacy notice.
Children
compact.cam is not made for children. Hosts must be at least 16, and buyers old enough to make a contract. A guest under 16 may take part only with the permission of a parent or guardian. Children often appear in event photos; a parent or guardian can ask us to remove a photo of their child as described under "Your rights".
Security
Every film has a long, random host link and a separate guest link; a guest's camera is tied to a secret in the guest's browser. Photos are not served by the product until the film develops. All traffic uses HTTPS. No method of protection is perfect: anyone who has a film's link can open its album, so share it only with the people you want to see the photos. If a security incident is likely to cause serious harm to you, we will tell you, here on compact.cam where we have no other way to reach you, and we will notify the authority as the law requires.
Changes to this policy
When this policy changes, we change the date at the top of this page.