Security and data protection at Snapveil
Here you can see where your photos and videos are stored, who can access them and when they are deleted. The legal details are in the privacy policy, and the data processing agreement is available under DPA.
Where your data is stored
- Servers in Germany: Snapveil runs on servers of Hetzner Online GmbH in Germany. This is where account data, event settings, guest names and the details of your pictures, such as the time they were taken, are kept.
- Photos and videos in the EU: Originals, previews and videos are kept in Cloudflare storage that is fixed to data centres in the European Union.
- Backups in the EU: We create backups regularly. They are stored in the EU as well.
Storage is always in the EU. Photos only go to providers in the United States on the Pro + AI plan, and only while the AI features of the event are switched on. The page AI and your data explains what happens there.
Encryption
Every connection to Snapveil is encrypted (HTTPS), whether you open a gallery, upload photos or sign in. Your photos and videos are stored encrypted. We store passwords in a way that even we cannot read them. That applies to your account password and to gallery passwords alike.
Who can see your gallery
- Private by default: A gallery is not listed publicly and is not indexed by search engines. Only people with the link or the QR code get in.
- Gallery password: From the Pro plan onwards you can additionally put a password in front of the gallery.
- Permissions per guest: You decide who may upload, view and download, and you can change that at any time.
- No permanently public image addresses: Your gallery link and the QR code stay valid. Individual pictures and videos, however, cannot be retrieved from permanent public addresses.
- Abuse protection: Snapveil is protected against automated attacks and mass requests.
Who has access on our side
Only a tightly limited group of people on our side has access to the servers and the database. External service providers or agencies cannot view your galleries, photos and videos.
- Our own accesses are protected with two-factor sign-in.
- We only access the contents of a gallery when you, as the account holder, ask us to as part of a support request, or when we are legally obliged to.
When your data is deleted
Your content is not stored indefinitely. The period runs from the day you create the event, not from the day of the celebration:
- Free: 2 months
- Pro and Pro + AI: 12 months
If you need more time, you can extend the storage of an event by another 12 months for €9.90. Before the period ends we send you several reminder e-mails, so you can download everything in time. After expiry, photos, videos, the associated details and AI results are deleted.
You can also delete individual files, a whole event or your account yourself at any time. When you delete your account, you still have 30 days to download your content. After that it is removed permanently. We only keep for longer what the law requires, such as invoices.
Service providers we use
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH, Gunzenhausen | Hosting of the application | Germany |
| Cloudflare, Inc. | Storage for photos and videos, delivery, attack protection | Storage in the EU, delivery through Cloudflare's worldwide network |
| Stripe Payments Europe Ltd., Dublin | Payment processing | Ireland |
| Amazon Web Services EMEA SARL, Luxembourg | Sending service e-mails | EU |
| HERE Global B.V., Eindhoven | Place names from GPS coordinates, Pro + AI plan only. Only coordinates are transferred, never the picture. | Netherlands |
| OpenRouter, Inc. with OpenAI and Google | Image analysis and search, Pro + AI plan only | USA |
| Google Ireland Ltd. | Sign in with Google, only if you use it | Ireland |
We run visitor statistics and error logging ourselves in the EU, without cookies and without passing data on to third parties. The full list of all recipients is in the privacy policy; see Cookies for more on cookies.
Three commitments
- No training. Your photos and videos are not used to train AI models, neither by us nor by the AI providers we use.
- No selling. We do not sell data and we do not pass it on for advertising purposes.
- No advertising. There are no ads and no ad networks in Snapveil. We earn money from the paid plans only.
Reporting a vulnerability
If you notice a vulnerability, please write to contact@snapveil.com. Briefly describe what you found and how it can be reproduced. We will get back to you promptly. Please do not access other people's galleries while testing, and do not publish the issue before we have been able to fix it.
Last updated: 20 September 2026