Photo security and privacy
Updated on 5 November 2026
In short
The photos of a Festiroll album are kept in private storage, in Switzerland, by Infomaniak. No link to a photo exists before the person is allowed to see it, and each link expires after 5 minutes at most. Festiroll's administrators do not see the photos, and no facial recognition is done.
Private storage
Photos are never public. To show a photo, the server checks who is asking and when, then issues a signed link valid for 5 minutes at most. Before the reveal, it issues no link to other people's photos: no original, no thumbnail, no download. A signed link cannot be revoked: that is why it lives so briefly.
Who sees what
- Each guest always sees their own photos, and other people's at the reveal.
- The organiser and moderators see every photo, at their date.
- The photographer sees the guests' photos at their date, and only edits their own.
- Festiroll's administrators do not see the photos.
The album rules give the details.
Data and metadata
The thumbnail shown in the album contains no metadata. The original keeps the file's metadata: a photo added from the camera roll may show the date, the device and sometimes the location.
The site loads no script, font or image from another site, and sets no analytics or advertising cookie. Server logs contain no IP address.
No facial recognition
Festiroll does not analyse faces and applies no artificial intelligence to photos or voices. The first name shown with a photo is the nickname chosen by the guest.
Deletion and rights
On the date set by the plan, the album is deleted. Database backups are encrypted and do not contain the photos. Anyone can ask to access, correct or delete their data. Retention periods and rights are in the privacy policy.
Frequently asked questions
Is Festiroll certified compliant with the Swiss data protection act (nLPD)?
No certification is claimed. Data stays in Switzerland, with no facial recognition, and is deleted on the planned date.
Can an album show up on Google?
No. Albums are private and excluded from search engines. Only the public pages of the site, such as this documentation, are indexed.