Legal
GDPR and data rights
This page summarizes how people in the EU/EEA and other privacy jurisdictions can exercise their data rights.
Your rights
Depending on your location, you may have rights to access, rectify, delete, restrict, object to processing, request portability, and lodge a complaint with a supervisory authority.
Send requests to privacy@joinalbum.com. We may need information to verify that you are the host or the guest connected to the requested data.
Legal bases
We process host account and album data to perform the service contract, process payments, meet legal obligations, and protect legitimate security interests.
Guest uploads and names are processed to provide the album requested by the host and guests.
International transfers
Some processors may process data outside your country, including the United States. We rely on provider data processing terms and transfer mechanisms where applicable.
Firebase Authentication is part of the authentication flow; Cloudflare R2 stores private media objects used by the album.