Who sees the photos: privacy, moderation and removal

An event album holds faces, children and moments you would not post anywhere else. Here is who can upload, who can look, where the files go and how a photo is removed.

Who uploads, who looks

Anyone with the QR code or the guest link can send photos, with no app and no account. The QR code is therefore the key: display it at the venue, send it to your guests, but do not post it online. An album address is hard to guess, and albums are never indexed by search engines.

You always see everything from your host space. Its secret address opens your settings: keep it to yourself.
Guests see the gallery, open by default.
If you close the gallery, each guest only sees their own uploads.

The host settings: guest gallery, guestbook, message wall and uploads open or closed — The guest gallery and uploads are set here.

To stop receiving photos, switch "Uploads" off in the same settings. It is reversible.

Where the photos are

They are hosted by OVHcloud, in France, with a backup in a second French region: they do not leave the European Union.

The original is kept intact, with its metadata (GPS position included); it is what goes into the export and the HD archive. The display copies used by the gallery and the slideshow are stripped of it: a guest cannot read there where a photo was taken.

No advertising, no resale, and no use of the photos to train an AI.

Automatic moderation

It runs on every plan. Photos are analysed by Google Cloud Vision (for a video: the preview image and two frames taken from it), texts by OpenAI. Three modes:

Free: the AI only sets aside the obvious;
Soft, the default: the obvious is blocked, doubts come to you, the rest goes live;
Strict: nothing appears without your approval (Complete and Pro plans).

If an analysis service is down, the content waits for you: never published or rejected automatically. Anything set aside never shows in the gallery or the slideshow.

Doubts reach a console designed for the phone: one card per item, "Publish" or "Discard", the reason shown, and a queue that updates live.

The review console: a pending photo with the Discard and Publish buttons — The review console, usable one-handed during the evening.

Removing a photo

A guest removes their own uploads from the thank-you page, which lists what this device sent, as long as the album accepts uploads. A device cookie makes this possible: they must use the phone that sent it.
The host removes any item from the gallery, at any time.
Entourage: if you cannot reach the host, write to contact@entourage.photos.

The guest's thank-you page, listing what this device sent — The guest finds their uploads here and can remove each one.

A removed item disappears from the gallery and the slideshow at once.

Children and guests' data

For an album showing children: close the gallery, switch to "Strict" mode if your plan includes it, do not post the QR code online, and tell parents they can ask for a removal.

A guest has no account; their first name is optional. Details are in the privacy policy, and the guide on the guestbook and the wall covers messages.