1. Who is responsible for Momentovka
The data controller is me, David Azarian, a sole trader under the Czech Trade Licensing Act, company ID (IČO) 17064619, registered office K Beranovu 1190/15, Dolní Chabry, 184 00 Praha 8, Czechia. Momentovka is the name of the service I run under this IČO. I am not a VAT payer.
At a company event the controller of the photos and the guests' data is the company hosting the event; I process them for it under a data processing agreement according to Art. 28 GDPR.
For anything privacy-related, write to ahoj@momentovka.cz. I have no data protection officer — the law doesn’t require one of me.
2. Three roles, three kinds of data
In Momentovka you can be an organiser, a guest or a visitor of the website. Each role means different data:
- An organiser has an account, creates events and pays for them — sections 3 and 4.
- A guest has no account. They scan the card, get a camera and their photos end up in the event album — section 5 and the page What we do with the photos.
- A visitor can leave an e-mail on the waiting list — section 6.
3. The organiser account
There is no password with me. You sign in with Google, Apple, Seznam or Telegram; with your consent they pass me the identifier of your account with them, an e-mail (none from Telegram) and a name. I store:
- the identifier at the sign-in provider, the e-mail and the name if the provider passed them (with Apple this may be a relay address that hides the real one),
- the sign-in: a random session key stored on your device, valid for 90 days; I keep only its hash,
- events: kind, name, start, end and reveal time, plan, expected number of guests, when it was paid and when it was developed,
- a notification token (section 7) when you switch notifications on.
You delete the account right in the app (Account → Delete account). With it I delete all your events including the photos in storage, devices, sessions and identities. Payment records stay as accounting documents, with no link to an account anyone could look up.
4. Payments
You only pay on momentovka.cz. Payments are processed by Stripe Payments Europe, Limited (Dublin, Ireland): your card number, Apple Pay or Google Pay never reach me. Stripe passes me a customer number, the payment status, the payer's country (for EU tax rules) and a link to the invoice. I keep the amount, the item, the time and the exact wording of the consent to an immediate start of the service that you agreed to at checkout.
Invoices and the payment history are in the app under Payments and invoices; that page is hosted by Stripe.
5. Guests and photos
A guest creates no account. They get an anonymous signed key stored on their phone or in the browser; the name on the ticket is optional. Their photos, capture times and shot count belong to the event album. A guest in the browser can ask for one e-mail with the album link; in the app they can switch notifications on (section 7).
Who sees the photos, how long they stay, how to have a photo hidden and what applies to children is word for word in What we do with the photos. I do not recognise faces and use the photos for nothing else.
6. The waiting list for the apps
When you leave me an e-mail on the website, I store it with the type of event taken from the page the form stood on, the language you chose, the traffic source (utm_source or the referring page), the time of sign-up, the time of confirmation and the exact consent wording. After submitting you get a confirmation e-mail; until you click it, you are not on the list. Unconfirmed sign-ups are deleted after 30 days. I send at most two messages: the confirmation and one when the apps are in the stores.
7. Notifications on the phone
The app asks for notifications only when they make sense: a guest after finishing the film, an organiser after creating the first event. If you allow them, I store the device token, the platform and the app language. Notifications are delivered by the Expo service (Expo, Inc., USA) through Apple and Google. I delete the token when you sign out, delete the account, or when the phone stops accepting it. You can switch them off at any time in the phone settings.
8. How long I keep the data
- Photos and the album: 14 days from developing on a free event, 90 days on a paid one; then the album is hidden for 30 days and then irreversibly deleted, including the files in storage. Keep forever and the Archive hold the album as long as you have an account, with the Archive as long as the subscription runs (plus 30 days).
- The organiser account and events: as long as the account exists. Sessions 90 days.
- Payment records and invoices: for as long as accounting and tax law requires, usually 5 years from the end of the year of the payment.
- A guest's e-mail: until the album link is sent, at most until the event is deleted.
- A notification token: until sign-out, account deletion, or until it stops working.
- The waiting list: an unconfirmed e-mail 30 days; a confirmed one until you withdraw consent, at most 6 months after the message about the apps.
- Record of a withdrawn consent: 3 years — so I never write to you again and can prove I stopped.
- Security logs and bot protection: at most 30 days.
9. Who processes data on my behalf
The website, the app and the database run on the infrastructure of Cloudflare, Inc. (San Francisco, USA): hosting, database, photo storage, e-mail sending and the Turnstile form protection. Photos are in storage set up in the European Union; the database is located in Europe; Cloudflare is a global network, though, so some data (such as your IP address when a page loads) may be handled outside the EU as well. Cloudflare is my processor under a data processing agreement; transfers to the USA are covered by the EU–US Data Privacy Framework adequacy decision and standard contractual clauses.
Payments: Stripe Payments Europe, Limited (Ireland) as an independent controller of payment data and at the same time my processor for invoicing. Notifications: Expo, Inc. (USA) delivers them through the Apple Push Notification service and Firebase Cloud Messaging (Google). Sign-in: Google, Apple, Seznam.cz and Telegram are independent controllers at sign-in; they pass me only what you allow them to.
I don’t sell your data, don’t pass it to advertisers, and don’t use it to train any models.
10. Your rights
At any time you can:
- withdraw consent — for the waiting list with one click in every e-mail, for notifications in the phone settings, otherwise with a message to ahoj@momentovka.cz; withdrawal doesn’t affect what happened before it,
- delete the account right in the app, have a photo hidden with the button in the album,
- request access to your data, its correction or deletion,
- request restriction of processing or data portability — you’ll get the data in a machine-readable format (the album as a ZIP is in the app),
- object to processing based on legitimate interest.
I’ll reply within one month. If you think I’m handling your data badly, you can turn to the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz. I’d be glad if you tried me first.
12. Children
The organiser account isn’t meant for children under 15 and I don’t knowingly collect their data. Children are often guests at family events — how I handle that is on the page What we do with the photos. If it turns out I hold a child’s data that shouldn’t be there, write to me and I’ll delete it.
13. Changes to this policy
I only ever change this policy by issuing a new version with a higher number and date. The consent wording you saw at sign-up or at checkout stays stored with your record — so I always know what you said yes to.
Version 4 · 8 October 2026 (the policy covers the whole service: the organiser account, sign-in through providers, payments through Stripe, notifications through Expo, guests and photos; the waiting list is now about the apps in the stores) · Version 3 · 7 October 2026 (the type of event is not ticked, it comes from the page the form stands on) · Version 2 · 7 September 2026 (added the two technical cookies — site language — and the English version of the site) · Version 1 · 6 September 2026