PartyDrop lets an event organizer collect guests' photos and videos straight into the organizer's own Google Drive. This policy explains what information PartyDrop handles, why, and the choices you have. If you have a question or request, email bsateeshk@gmail.com.
The short version
- Photos and videos go from the guest's phone directly into the organizer's Google Drive. PartyDrop does not keep copies of them.
- Guests don't need an account. We keep the name a guest types in, a random ID for their phone, and basic details about each upload.
- Organizers sign in with Google. PartyDrop can only see the folders and files it creates in their Drive, nothing else.
- We don't sell data, show ads, use analytics trackers, or use anyone's photos to train AI.
Information we collect
Organizers
- Google account details: your Google account ID, email address, name and profile picture link, received when you sign in with Google.
- Google access tokens: so the app can create folders and save guests' uploads in your Drive while you're not signed in. They are stored encrypted and never sent to anyone's browser.
- Event details: event names, settings, folder names, and the secret code in each event's guest link.
- Drive storage figures: we read how much space is free in your Drive to warn you before it fills up. This is not stored.
Guests
- Your name, if you enter one. It is shown to the organizer and used to name your folder and files.
- A random device ID created in your browser, so you can see and delete your own uploads and nobody else's.
- Your IP address, recorded with each upload to limit abuse (for example, too many uploads in a short time).
- Upload details: file name, type, size, time and folder for each photo or video.
Photos and videos
Files are uploaded from the guest's device directly to the organizer's Google Drive. They do not pass through or get stored on PartyDrop's servers. To show thumbnails and full-screen previews, our server fetches a preview image from Google Drive and passes it to your browser without keeping it. Your browser may cache it for up to an hour.
Cookies and storage on your device
- Organizers: a sign-in cookie that keeps you signed in for up to 30 days, and a short-lived cookie (10 minutes) used during Google sign-in.
- Guests: your browser's local storage holds your device ID, the name you entered and the folder you chose. Files waiting to upload are kept in your browser (IndexedDB) so uploads can resume after a reload. They are removed once uploaded.
- No advertising or analytics cookies are used.
How we use information
- To run the service: create event folders, save guests' uploads to the organizer's Drive, and show galleries.
- To let guests manage their own uploads and organizers manage their events.
- To keep the service secure and prevent abuse.
- To answer your questions and requests.
Google user data
PartyDrop asks for the drive.file permission. It can only see, edit and delete files and folders that PartyDrop itself created in your Drive, and it can't read any of your other files. We use this access only to create event folders, save guests' uploads, show previews, rename or delete folders and files when you or the uploading guest ask, and check your free space. We don't transfer Google user data to others except as needed to run the service (see “Service providers”), and we don't use it for advertising.
PartyDrop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who can see what
- The organizer can see every photo and video uploaded to their event, with the guest's name. The files live in their Google Drive, where the organizer decides who else can see them.
- Guests can only see their own uploads in PartyDrop, not other guests'.
- Files in Google Drive are also covered by Google's Privacy Policy.
Service providers
We use these companies to run PartyDrop. They process data on our behalf and may store it outside Canada, including in the United States:
- Google: sign-in and Google Drive storage
- Vercel: website hosting
- Neon: database hosting
We may also disclose information if required by law.
How long we keep information
- Organizer account details are kept until you ask us to delete your account.
- Event and upload records are kept until the organizer removes the event in PartyDrop. Removing an event deletes its records here; the files stay in the organizer's Google Drive.
- Deleted photos and videos go to the organizer's Google Drive trash, where Google keeps them for 30 days before deleting them permanently.
- Hosting providers keep short-term technical logs according to their own policies.
Your choices and rights
- Guests can delete their own uploads while the event is open, and can ask the organizer to remove photos at any time.
- Organizers can remove events, delete files and folders, and revoke PartyDrop's access to their Google account at myaccount.google.com/permissions.
- Anyone can ask to see, correct or delete the personal information we hold about them by emailing bsateeshk@gmail.com. We will respond within 30 days, as required by Canadian privacy law (PIPEDA and British Columbia's PIPA).
Security
Connections use HTTPS, Google tokens are encrypted at rest, and guest links contain a long secret code that the organizer can replace at any time. No system is perfectly secure, but we work to protect your information.
Photos of other people and children
PartyDrop is not intended for children under 13 to use on their own. Please only upload photos and videos you have the right to share, and respect the wishes of people who appear in them. Organizers should let guests know where their photos will be stored.
Changes to this policy
If we change this policy, we will update the date at the top of this page. For significant changes, we will make reasonable efforts to let organizers know.
Contact
Questions or requests: bsateeshk@gmail.com.