once & always← Home

YOUR EVENT. YOUR MEMORIES.

Privacy & photo access

How this event gallery uses Google Drive and shares your photos.

Client enquiries

If you choose Send enquiry on the booking form, Once & Always stores the event brief, contact details, requested designs and your confirmations privately in its Cloudflare database so the owner can review and respond. These details are not published on event webpages, added to a guest directory or used for marketing. Downloading a copy alone does not submit your answers. Booking confirmation and artwork approval remain separate review steps.

The owner can archive enquiries; archiving keeps them private and does not delete their details. Contact Once & Always through your agreed booking channel to request corrections or removal. A receipt reference identifies an enquiry but does not provide public access to its contents. Short-lived hashed rate counters help limit spam; raw IP addresses are not stored in the enquiry records.

Who connects Google

The event organizer operates this gallery. Only the owner signs in with Google. Guests can use their printed QR without a Google account.

What the app accesses

Owner sign-in uses basic Google identity and email, plus the drive.file permission for files created or explicitly opened with this app. It does not request access to all unrelated Drive files. The owner's Google authorization is encrypted in the gallery database; its encryption key is stored as a Cloudflare secret.

Where photos go

The booth saves camera originals on the operator's computer. Prepared digital copies, finished strips, artwork and smaller gallery previews are stored in the owner's private Google Drive. Cloudflare hosts these pages and handles authorized uploads and downloads. Google and Cloudflare may process ordinary connection and operational logs to provide their services.

Who can view them

Anyone holding a group's QR link can download that group's photos until 48 hours after the event's configured end. Keep that link private. Approved highlights and the all-strips page contain public web previews that remain available after downloads expire. Public strip previews hide the private QR. Visible previews and already downloaded copies can be saved or shared by their viewers.

Retention and removal

Link expiry blocks new guest downloads; it does not delete Drive archives or local files. Portfolio previews are separate retained copies. Contact the organizer of your event about removal. The owner can manage stored files in their Drive, including the separate portfolio copies, and revoke this app's Google access in their Google Account. No automatic archive deletion is currently enabled.

Purpose

Google data and event photos are used to operate this gallery and deliver event photos. This app does not sell them or use them for advertising or AI model training.

Return to the gallery

Optional guestbook and networking

Event webpages may offer a text guestbook and an optional adult networking directory. The organiser controls whether these modules are enabled. Wishes may appear immediately or after approval, as stated beside the form; networking profiles always require organiser approval. Neither is required to download booth photographs.

Guestbook submissions contain your chosen name and message. Approved messages are visible for up to 30 days after the event; the organiser can export the guestbook. Networking profiles contain the photo, name, introduction and contact fields you explicitly select and consent to publish. Anyone with the event link may view or copy approved profiles and use those contact details to contact you. Profiles are self-submitted introductions, not verified identities.

Networking is off by default and supports voluntary profiles by adults aged 18 or older. It is not intended for children’s contact directories. Profiles expire seven days after the event. Publication is separate from the original 48-hour photo-download window and does not make the rest of your private session public.

Each submission receives a private removal link. Use it to withdraw your submission; names, messages, contacts and the profile-photo association are cleared from the event page. Previously saved copies held by others cannot be recalled. Your original booth photographs follow the existing event retention settings. If you lose your removal link, contact the event organiser to hide the entry.

Public access ends at the stated deadline. A daily job clears expired submission content within 24 hours; shared photo files remain under the existing photo-retention policy. Random visitor identifiers and short-lived hashed rate counters help limit repeated submissions. No marketing messages are sent from these forms. The page requests search engines not to index it, but this does not make a published profile private.

Penyertaan buku tetamu dan rangkaian kenalan adalah pilihan. Hanya butiran yang anda pilih dan benarkan diterbitkan akan dipaparkan selepas kelulusan penganjur. Sesiapa yang mempunyai pautan acara boleh melihat atau menyalin profil yang diterbitkan. Gunakan pautan pemadaman peribadi untuk menarik balik penerbitan. Profil rangkaian tamat tujuh hari selepas acara; muat turun foto asal masih mengikut tempoh 48 jam selepas acara.