Event and photo guide privacy

Updated November 7, 2026

Anyone with a guide link can read, save and forward the information explicitly reviewed and published by its host. Do not publish confidential information or guest lists.

Only selected photos are published

When explicitly published from an app version with photo-card support, the public copy may include small photo previews (up to 800px and 75KB per card), titles, descriptions, creator, material/technique, year, dimensions, credits, accessibility descriptions, prices, currency and availability. Selecting a photo or saving locally does not publish it. Photo publication is not automatically enabled in older app versions.

Original files and high-resolution print copies are not sent to this service. The app’s print copy is an orientation-corrected, re-encoded copy up to 4,096px with source metadata removed; it is not a preserved original. Public previews exclude location/capture metadata, local project references, editing keys and purchase tokens. Visitors can save or forward public photos.

Storage, access and closure

OpenAI Sites and Cloudflare use global infrastructure. Public guide content, editing verification hashes and minimal rate-limit records are stored in Cloudflare D1. Reading needs no account or contact details. This reader has no attendance registration, advertising tracking or custom visitor analytics. Hosting providers may process access logs for delivery and security. The existing billing server is separate.

Excluding or deleting a card and publishing an update stops serving its photo detail. Withdrawing a guide clears its public text and previews and closes the link. Expired guides are also unavailable. Open pages must reconnect and fetch new information to receive changes; offline they may show the last information until the known expiry. Previously saved photos, screenshots and printouts cannot be recalled.

Minimal capability hashes and version records remain after withdrawal. Records more than 30 days past expiry are cleaned up on a later server write, not on a guaranteed date. Contact support for earlier deletion.

Travel and optional gift details

Hosts may explicitly publish venue maps, transport, accessibility, practical details, gift links and recipient-approved bank details. These are public to anyone with the link. Salonpaper displays account text only; it does not verify accounts or transfer money. Ordinary project backups also contain locally entered account details.

Tapping a map link opens an external map service. Google links share the destination; the map service calculates the route. Confirm the destination and choose your starting point there.

Optional guest messages

Reading needs no account. If you choose to post, we store your name or alias, message, time, moderation state and an event-specific browser verification hash in Cloudflare D1. Reports store a reason category and reporter verification hash. No email, telephone number or payment details are required.

Only host-approved messages become public. You can delete your messages using the deletion key stored in this browser, or ask the host or support. Deletion clears the name and text; minimal verification records remain until expiry cleanup. Changing browsers or clearing browser data loses local deletion access.

Messages stop being served when the guide expires or is withdrawn. Their content and reports are cleared on withdrawal, a later request to the closed guide or a later server write. Browser blocks are limited to this browser and can be bypassed by clearing its data. No automatic message or report notification is sent to the host.

Guest message rules

Be respectful. Do not post harassment, hate, threats, sexual or illegal material, exploitation of children, spam, impersonation, fraud or private information about anyone. Do not publish contact details or financial information in messages. You must have the right to share what you post.

Hosts must review messages and reports and remove abusive content. Visitors can report a message or author, hide an author on this browser and contact support. Hosts can hide, delete and block authors. Salonpaper may remove abusive content or close a guide. These rules apply when submitting a message.

Optional encrypted QR recovery

Editing access is normally kept on the publishing device. In versions with QR recovery, you can explicitly export an encrypted recovery file containing the guide details, small photos and QR editing capability. It excludes print photos, subscription access, display auto-switch schedules and source-project links, and is not automatically uploaded. Anyone with both the file and its password can edit or withdraw the guide; keep them separately. Restoring does not revoke the original device’s access. Lost files or passwords cannot be recovered. Without a working recovery file, withdraw the guide before uninstalling, clearing app data or transferring devices.

Send the guide link and your request. Never send your editing key.

support@getsalonpaper.com