Retention schedule
When a gallery closes, access ends: guests can no longer open it, and uploads and downloads stop. Nothing is deleted at that moment. Stored photos, the resized copies made from them, guest selfies and the face data derived from them are deleted 30 days after the gallery closes. A deleted original can be recovered by us for 30 days after that, and a separate, locked backup copy of the original photos is kept for up to 120 days before it too is removed.
Gallery windows
| Package | Guest galleries stay open |
|---|---|
| Free | 30 days after your event |
| Paid passes (Essentials, Classic, Premier, Festival) and event credits | 12 months (365 days) after each event |
| Subscriptions | No countdown while the subscription is active |
What happens, and when
| Moment | What happens |
|---|---|
| The gallery closes (event date + the window above) |
Access ends. Guests can no longer open the gallery, and uploads and downloads stop. Nothing is deleted at that moment. |
| 30 days after the gallery closes | The original photos, the resized copies made from them, guest selfies, the face data derived from selfies and any download archives are deleted. Each photo’s record is marked as purged and a deletion record is written. |
| 30 days after a host deletes an event | The same deletion runs for that event. |
| 7 days after a host removes a photo | Until then the host can restore it. After that its original and resized copies are deleted and it can no longer be restored. |
| 14 days after a download archive is made | The ZIP file is removed. A new one can be made while the gallery is open. |
| 30 days after a subscription ends | The events and photos it covered are removed from the account (access was restricted from the day it ended). Their files are deleted 30 days after that. |
Recovery and backups
For 30 days after an original photo is deleted, we can still recover it: the storage keeps the previous version behind the deletion for exactly that long. Ask through a support request from your account, or the contact form.
A separate backup copy of the original photos is kept in the same Australian region as the originals, in storage of its own encrypted with its own key. Each copy is locked against alteration or removal for 90 days, and is removed 120 days after the original was deleted. Selfies, face data and resized copies are never backed up.
Cold storage
30 days after upload, original photos move to a lower-cost storage tier. This changes nothing you can see: galleries and downloads keep working.
What we keep about deletions
A record of each deletion — which event, when, why, and how many files — is kept for 3 years so we can answer questions about it. It contains no photos and no face data.
Last updated .