Privacy Policy
Last updated: 14 October 2026
This policy explains what personal data ClinkShot processes and why. We keep data collection to the minimum needed to run the service.
Who is the data controller
Paweł Dziura (sole proprietorship, “Działalność Ogólna”), Poland. Contact: hello@clinkshot.com.
What we collect
- Organizer email — when you create a gallery, to manage it and send gallery links/notifications.
- Uploaded photos and videos — content guests upload to a gallery. We automatically strip EXIF metadata (including GPS location) from images on upload.
- Technical cookies — a session cookie and an anonymous guest identifier, needed for the upload flow. No advertising cookies.
- Usage statistics (no cookies) — to see which pages people visit and whether galleries get used, we record page views and key steps (gallery created, guest upload) with the referring site and device type. Visitors are counted with a daily hash of IP address and browser; the IP itself is not stored and the hash changes every day, so visits cannot be linked across days.
- Google Analytics (only with your consent) — loaded only after you click “Accept” in the cookie banner. Declining keeps it off.
- Payment data — if you buy a paid plan, payment is processed by Stripe; we do not store card numbers.
Why we process it (legal basis)
To provide the service you request (Art. 6(1)(b) GDPR — performance of a contract), to keep it secure and working and to measure how the service is used (Art. 6(1)(f) — legitimate interest), Google Analytics only on the basis of your consent (Art. 6(1)(a)), and, for paid plans, to meet legal/ accounting obligations (Art. 6(1)(c)).
Sharing & processors
We do not sell personal data. We share it only with processors that help run the service: our hosting provider, Stripe (payments) and — only if you consent — Google (Analytics). Galleries are private — accessible only to people with the link or QR code.
Retention
Galleries and their uploaded media are deleted after the event window ends. Billing records are kept as long as tax/accounting law requires. Usage statistics are deleted after 6 months; Google Analytics data follows the retention period set in Google Analytics. You can ask us to delete your gallery sooner.
Your rights
Under the GDPR you can request access, rectification, erasure, restriction, portability, and can object to processing. Email hello@clinkshot.com. You also have the right to lodge a complaint with the Polish supervisory authority (PUODO).
We may update this policy; material changes will be reflected in the “last updated” date above.