Privacy policy

1. Who we are

The service is published by Tsawerna, company being registered, 3100 Kairouan, Tunisia. For any question about your data: contact@tsawerna.com.

2. The data we process

Organizers (people who create a party):

• your email address and your password (stored in encrypted form), or, if you sign in with Google, the name, email address and profile picture that Google sends us;
• your party's information: name, dates, venue, welcome message, cover photo and WhatsApp contact number;
• for a payment: the amount, the reference and the transfer receipt you upload. We never receive any bank card data.

Guests: a first name if you choose to give one, the photos and video messages you send, and a session identifier kept in a cookie. We do not ask guests for an account, an email address or a phone number. When a QR code is scanned, we record the time and a short excerpt of the browser identifier (device and browser type), to count visits.

Removal requests: the photo concerned and, if you provide them, your message and a way to contact you back.

For each photo, we also keep technical information: size, dimensions, date received, and a fingerprint used to spot duplicates. Your IP address is used at the time of the request to limit abuse; we do not store it.

3. Why we use it

• to provide the service: receive photos and videos, show them during the party, deliver them to the organizers and publish the gallery they choose;
• to ensure security and moderation: limit abuse and hide inappropriate content;
• to handle payments and our accounting obligations;
• to send you the emails the service needs: account confirmation, password reset, archive ready, payment confirmed.

We send no newsletters or advertising, we do not sell your data, and we use no audience measurement or advertising tracking tools.

4. Automatic photo analysis

Each photo is analyzed by an automatic filter that runs on our own servers, with no outside service. A photo judged explicit is hidden until the organizer reviews it. We do not perform any facial recognition.

5. Who sees the photos and videos

• During the party, each photo appears for a few minutes in the live feed, visible to people who have the party link, and on the room screen if one is used.
• Organizers see every photo and every video message received. They can download, caption and hide them.
• Video messages are visible only to the organizers.
• After the party, the organizers publish a gallery of the photos they kept. Anyone who has its link can access it, and it is not protected by a password: share this link only with your guests.
• The dashboard link gives access to the party without a password: the organizer should only hand it to people they trust.

6. Our service providers

To run the service, we rely on providers who process data on our behalf and according to our instructions:

• Supabase: database and organizer accounts;
• Cloudflare (R2): storage of photos, videos and archives;
• Fly.io: hosting of our servers, in Paris;
• Upstash: processing queue (thumbnails, archives);
• Resend: sending emails related to a party;
• Google: sign-in with a Google account, if you choose it.

These providers may host data outside Tunisia, notably in the European Union and the United States.

7. Data received from Google

If you sign in with Google, we receive only your name, your email address and your profile picture. We use them to create your account and identify you, and for nothing else. We do not sell them, we do not share them with third parties and we do not use them for advertising. Our use of this data complies with the Google API Services User Data Policy, including its Limited Use requirements.

8. How long we keep it

• Photos and videos: the gallery and download links remain accessible for twelve months after the gallery is published, and then stop being accessible.
• You can ask at any time for a party, its photos and its videos, or your account, to be deleted by writing to contact@tsawerna.com. We carry it out within 30 days.
• A photo taken down following a removal request is deleted.
• Payment data is kept for the period required by our accounting obligations.
• The guest session cookie expires after 30 days, the language cookie after one year.

9. Cookies and browser storage

• a guest session cookie, to recognize your phone and your remaining photos during the party;
• the organizers' sign-in cookies;
• a cookie that remembers the chosen language;
• in the browser, photos waiting to be sent (erased once sent) and a display preference.

They are all necessary for the service to work. We use no advertising or audience measurement cookies.

10. Your rights

In accordance with Tunisian Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data, and, if you reside in the European Union, the General Data Protection Regulation (GDPR), you can request access to your data, its rectification or its deletion, or object to its processing. Write to contact@tsawerna.com; we reply within 30 days.

A guest can also ask for one of their photos to be removed from the gallery, using the "Request a photo removal" link, without creating an account. The organizers do not know who made the request.

Finally, you can lodge a complaint with the National Authority for the Protection of Personal Data (INPDP) in Tunisia, or with the data protection authority of your country.

11. Age

Organizer accounts are reserved for adults. Organizers are responsible for the presence of minors in their party's photos and for obtaining their parents' consent.

12. Changes

We may change this policy, for example if we change providers. The date of the last update appears at the top of this page.