Privacy policy
Last updated 27 October 2026
As It Happened is run by Jack Lowes, a sole trader in Australia. This policy explains what we collect, why, and who we share it with. We handle personal information in line with the Australian Privacy Principles.
What we collect
From hosts who create an account:
- Your email address and a password. We store only a scrambled (hashed) version of the password, never the password itself.
- The names, family name and event date you enter, and the web address you choose.
- The stickers you make. Background removal runs on your own device, so the original photo you start from isn't sent to us. Only the finished sticker is uploaded.
- Payment records from Stripe: the amount, date, and your billing name and country. We never receive your full card number.
From guests: the photos and videos they upload, and the name they type in, if any. Guests don't need an account.
From everyone: your IP address and basic request details, used briefly to block abuse (for example too many wrong passwords) and kept in short-lived server logs.
Photos and videos can contain location data (EXIF) recorded by the camera. We store files as uploaded, so this data may be kept. Anyone with the guest password can download them.
Cookies
We use only the cookies the service needs: one to keep you signed in, and one to remember that a guest entered the right password. There are no advertising or analytics cookies.
How we use it
- To run your site and show it to the guests you invite.
- To take payment and send receipts and invoices.
- To send account emails such as sign-up confirmation, password resets and important service notices. We don't send marketing email.
- To keep the service secure and meet legal obligations, such as tax records.
We never sell personal information, and we don't use your photos for advertising or to train AI models.
Who we share it with
We use these providers to run the service. Each one processes data only to provide its part:
- Cloudflare hosts the website and stores photos, videos and account data, and registers domain names.
- Stripe processes payments and invoices.
- Resend sends account emails.
- Google Fonts and jsDelivr / Hugging Face deliver fonts and the sticker tool's AI model to your browser, so they see your IP address when those load.
These providers may store or process data outside Australia, including in the United States and Europe. We may also disclose information if the law requires it.
When we register a .party domain for you, we're listed as the registrant, so your personal details aren't published in the domain registry.
How long we keep it
- Your site, photos and stickers: while your site is active (see our terms), or until you ask us to delete them.
- Your account: until you ask us to delete it.
- Payment and invoice records: five years, because Australian tax law requires it.
Your choices
- You can ask to see, correct or delete your personal information. Hosts can ask us to delete their whole site.
- Guests who want a photo removed should ask the host first, or email us.
- If you're unhappy with how we've handled your information, email us and we'll respond within 30 days. You can also complain to the Office of the Australian Information Commissioner.
Security
Connections are encrypted, passwords are hashed, each site's files are kept separate from every other site, and guest sites are password protected. No system is perfectly secure. If a breach is likely to cause you serious harm, we'll tell you.
Contact
Email me@jacklowes.com.