Privacy

The full policy is being written with counsel before launch. These are the rules the product is built on — they are binding on the code, not aspirational.

• Private by default

  An event is reachable only with its link or QR code. Guest pages and albums are noindex; nothing is discoverable in search or inside Roll.

• Who sees your photos

  Everyone with the event link sees the album. Hosts can close uploads at any time; closing never deletes anything.

• Face search is opt-in

  Find yourself runs only for guests who explicitly agree, only inside that one event, and the biometric template can be deleted on request.

• Originals are kept

  Photos are stored at full resolution and without watermarks. Hosts can download them for as long as the event is hosted.

• Deletion

  Hosts can delete an event, and guests can delete their own uploads. Deletion removes the files from the album and schedules the stored objects for removal.

Questions or a deletion request: hello@roll.events