Privacy policy
Last updated: 27 September 2026
HiveAlbum is a private photo and video sharing service for events. This policy explains what personal information we collect, why, how long we keep it and the rights you have. It applies to hosts (people who create an event) and guests (people who share photos to an event).
Who we are
HiveAlbum (hivealbum.com) is operated by Matthew Cooke, a sole trader based in the United Kingdom, who is the data controller for account, payment and service data. Contact: hello@hivealbum.com.
For the photos, videos and comments shared into an event, the host decides who is invited and what is kept, and we store and display that content on the host’s behalf.
What we collect
| Information | Why | Lawful basis |
|---|---|---|
| Host account: name, email address, password (stored only as a secure one-way hash) | To run your account and events and send service emails (verification, password resets, album reminders) | Contract |
| Guest name and a random cookie that remembers you on that event | So hosts and guests can see who shared what, and so you can manage your own uploads | Legitimate interests |
| Photos, videos, album names, comments and reactions | The service itself: storing, converting and showing them to the people the host allows | Contract (hosts) / legitimate interests (guests) |
| Payment records: plan, amount, date and Stripe reference | To provide what you paid for and keep accounting records | Contract / legal obligation |
| Technical data: IP address and browser type, held briefly | Security, preventing abuse (for example, rate-limiting sign-ins) and fixing problems | Legitimate interests |
Location data: photos and videos often contain GPS location and camera details. We remove this information from every copy shown to guests. The untouched original, including its metadata, is kept for the host to download.
We never sell your data, use your photos for advertising, or use them to train AI models.
Who we share it with
We use a small number of trusted providers, only as needed to run HiveAlbum:
- Stripe: processes card payments. Your card details go directly to Stripe and never reach our servers.
- Resend: sends our service emails (your email address and the email content).
Photos, videos and account data are stored on our own servers in the United Kingdom. We may disclose information if required by law.
Cookies
We only use cookies that are strictly necessary to make HiveAlbum work: one keeps hosts signed in, and one remembers a guest on an event. We also save small preferences (such as your gallery view) in your browser. We don’t use advertising or analytics cookies, so we don’t ask for cookie consent.
How long we keep it
- Event photos, videos and comments: for the period included in the event’s plan (14 days on the free trial, 12 months on Essentials, 3 years on Premium). The album then closes, and everything is permanently deleted 30 days later. We email the host before both happen.
- Deleting an upload, a comment or a whole event removes it straight away.
- Accounts: until you ask us to delete yours.
- Payment records: for 6 years, as UK tax law requires.
Photos of other people and children
Events often include photos of people who didn’t upload them, including children. Hosts are responsible for only inviting people they trust and for removing anything someone asks them to. Anyone can ask the host, or us at hello@hivealbum.com, to remove a photo of themselves or their child. HiveAlbum accounts are for people aged 18 or over.
Your rights
Under UK data protection law you can ask to access, correct, delete or receive a copy of your personal information, and to restrict or object to how we use it. Guests can delete their own uploads at any time from the event page. For anything else, email hello@hivealbum.com and we’ll respond within one month.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ICO).
Security
All connections use HTTPS. Passwords are hashed with scrypt, media can only be opened by people with access to the event, and access to our servers is restricted. No system is perfectly secure, so please keep your own copies of photos that matter to you. Every paid plan includes a one-click download of the whole album.
Changes
If we make important changes to this policy, we’ll email hosts and update the date at the top.