Privacy

At a glance

What this is

Mementag is your day at an event, in photos and a short video. You scan a QR code, take a photo at the spot, and Mementag makes a short video of your day and a personal page that keeps it. No app, no account, no password.

What we collect, and why

• Your photos. The photos you take at each spot, with your camera or from your photo library. They are yours. We use them to show on your page, on an aggregated page if you chose to share them, to make your video, and for nothing else.
• Your email address, only if you give it. Nothing is required to take part. If you type your email, we use it to send the link to your video and your page, and to send your page link again if you ask for it. No newsletter, and we never sell it.
• Your mobile number, only if you give it. If you choose a text instead of, or as well as, an email, we use your number to send one text with your link, and again only if you ask for your link. Message and data rates may apply. Reply STOP to stop texts, HELP for help.
• Your first name, only if you type it when you choose to send your details to a sponsor.
• What happens on the floor and on your page. Scans, photos, videos made, taps on the share row, visits to your page and taps on a sponsor's link. Each is recorded with the time, which spot or sponsor it concerned, and your browser type so we can fix problems on it. These records are tied to a random ID for your phone. If you gave your email or mobile number, it sits on the same record so we can send your link. We do not record your location.
• A visit to mementag.app. When you open our own pages (not your event page) we count the visit: which link brought you, the page, the day, and whether it was a phone. No name, no address, no cookie.
• A message from the contact page. Your name, email and note, so we can reply. It is also emailed to Fred and Greg. We delete it from our database one year after it arrives; the emailed copy stays in their inboxes as ordinary business email, and we delete it too if you ask. To stop the form being abused, we keep a scrambled, one-way code made from your internet address, never the address itself.
• On your phone. Mementag keeps your photos and progress in your browser's own storage until they upload, so it works with no signal. We set no advertising or tracking cookies and use no third-party analytics.

What we never do

• No face recognition, face matching or any analysis of who is in your photos. Your photos are stored and shown, never analyzed for who you are.
• We do not sell your data. The event and its sponsors see totals only: how many people scanned, posted and visited. They never see your photos, your name or your email. Your photos appear publicly only if you choose to add them to the event collection, and it never shows your name or email.
• We do not sell, rent or share your mobile number, your consent to receive texts, or any text-message opt-in data with anyone for marketing or promotional purposes. Text-message opt-in data and consent are never shared with third parties; the only company that handles your number is the text-message provider that delivers the message for us.
• The exception is a lead you give on purpose: if you tap a sponsor's button and agree to the sentence shown on screen, your email address (and first name, if you typed it) goes to that sponsor, and only to them.

How it is protected

• Everything travels encrypted (HTTPS) between your phone, our servers and our providers.
• Our database and our photo storage are encrypted at rest (AES-256), and the database is closed to the public: only our own server can read it.
• Your page is private by link. Its address is long and random; nobody can find it unless you share it. Photos and videos are shown through links that expire within an hour.
• Changes to your page, such as replacing a photo or deleting everything, only work from your own phone or your private link.
• Before a photo leaves your phone, Mementag redraws it, which strips the hidden details phones add to photo files, such as location and device.
• Staff at the event can look up an attendee by the code on their page, to correct a mistyped email address or mobile number. They cannot see your photos that way.

Who handles the data

Mementag runs on a small number of service providers. Each may use the data only to run the service for us, never for its own purposes.

Your page and your video

Posting your video to a social network is your choice and happens on your phone, in that network's app. Your video carries the event's name and the sponsor of the spot where each photo was taken. The link to your page goes with it when you share.

The event collection

After an event, Mementag may open a public page of the event's photos, grouped by the spot where each was taken. Your photos are only ever part of it if you tick "Add my photos to the collection" on your own page. It is off unless you choose it, and we record when you did and the words you agreed to. On the public page each photo has a random number, never your name, email or the time it was taken.

We check every photo before it appears. Remove the check on your page at any time and your photos come out, with the rest of your page left as it is. Delete everything removes the event photos, along with everything else.

How long we keep it

Your page stays live for one year after the event, so your video and photos are there when you want them back. Save to Photos when you take a picture, and Download on your page, give you your own copy at any time. When the year is up, we delete its photos, video, email address and mobile number, and keep only the event's totals.

Delete everything

At the bottom of your own page (the private link from your email) there is a Delete Everything button. It removes your photos (from the event collection too), videos, page, record (your email address and mobile number with it), and your phone forgets your Mementag. Your scans and visits stay in the event's totals with nothing linking them to you.

No link to your page? Email hello@mementag.app from the address you gave Mementag and say "delete everything"; we do it by hand and tell you when it is done. A lead you gave a sponsor is deleted on our side; ask the sponsor directly to delete from their records.

Children

Mementag is for attendees of the event. We do not knowingly keep contact details for anyone under 13; if you believe we have, email us and we will delete them.

Questions

Write to hello@mementag.app, or use the contact page. This page describes the service as it runs today and is updated when the service changes.