Privacy notice

picbox is the album for one event. Guests upload photos without an account. This page says what is kept, and for how long.

Who is responsible

The venue that created the event is the controller for the photos in it. The operator of picbox.gr processes them for the venue: hosting, storage, bot protection, and the venue and host emails.

Contact: privacy@picbox.gr. For a single photo, the host or the venue can delete it from the admin straight away.

What we collect

• The photo or short video you upload, and a small copy for the grid.
• The name you type, if you type one. It is optional.
• The upload time and the file name.
• The venue admin's email and, if given, the host's email, for the sign-in link and the warning before deletion.
• Your IP address, only inside a short rate-limit window in the network cache. It is not written to the database.

Why

The photo goes on the shared album because you ask for that with the consent tick on the upload page. Anyone with the event link or QR can view it and download the ZIP. The rate limit and Cloudflare Turnstile exist so the album is not filled by automated uploads.

How long it stays

Every event has a deletion date, at most 180 days from today. A daily job closes uploads when the window ends, sends one warning a few days before, then deletes the files and guest names. The event card remains as an empty record, with the host email if one was given, as the venue's own note of the booking.

A storage safety rule may keep forgotten files for up to 180 days even if the daily job missed them. Photos are not sold, and they are not used for advertising or face recognition.

Your rights

You can ask for access, correction, or erasure. On the event page, the browser that uploaded a file keeps a remove control for that device. Otherwise ask the host, or write to privacy@picbox.gr. You can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Who processes it

The app runs on Cloudflare: Workers for the pages, D1 for the records, R2 for the files, Images for small previews, Turnstile for the bot check, and Email Service for sign-in links and expiry warnings. Cloudflare operates a global network. Files are not sent to another provider for advertising.

Children and people in the photos

The service is not directed at children. Upload only photos you have the right to share. If someone in a photo asks for it to come down, the host can delete it immediately.