Privacy and security

Photos, videos and voice notes are stored in private storage. The file has no public address: each viewing is served with a signed temporary link that expires.

The album and wall pages are not indexed by search engines. Anyone who has the link or the QR code can get in, which is why it's best to share it only with your guests.

An album opened by QR code can be opened by anyone who walks past a poster. That's why, on the Pro plan, you can switch on an automatic filter that checks each upload before it is published. The first part is done by the server without looking at the image: signals such as the file carrying no camera data, being a screenshot or having already been uploaded at another wedding.

Only what piles up several of those signals is sent to an AI model run by an external provider, through a gateway, and only on the Pro plan with the filter switched on. What is sent is the 480 px thumbnail, not the original file. If the model considers it suitable it is published (unless you have pre-approval switched on); if not, or if the analysis fails, it stays pending for you to approve or discard from the dashboard: the model deletes nothing. We can't be sure what the provider does with the images once received. If you'd rather no image left MilMoments, don't switch the filter on.

Guests don't create an account. Only the name or nickname they type is stored, along with the content they upload. We don't ask for a phone number or an address.

Photos and videos keep the data the phone adds when they are taken: date and time, phone model and, if the person who took them had location turned on for the camera, the place. That is what lets them drop into the right date and place by themselves when they are saved to the phone's gallery. Anyone who has the album link and downloads a photo can see that data. Each guest can avoid it by turning off the camera's location before taking the photo, and we remind them when they upload.

The couple decide what is done with the wedding photos: they hand out the QR code, decide what gets published and when everything is deleted. MilMoments only provides the place where they are kept and handles the content following their instructions.

A guest who wants to withdraw something they uploaded can ask the couple, who can delete it at any time from the dashboard, or write to us via contact. Photos in which other people appear are treated the same way: if someone doesn't want to be in one, it is removed.