Privacy Policy

Who this covers

Lore has three kinds of people, and we collect different information from each:

• Studios: the photo booth companies that subscribe to Lore, and their staff.
• Clients: the couple or host whose event the books are for. Clients open their books with a sign-in link sent to their email, with no password.
• Guests: people at the event who scan the booth’s QR code. Guests never sign up or log in.

For studio accounts and visitors to lorebooth.com, Momentus is the controller: we decide how information is used. For the books themselves (client details, guest notes and votes), the studio is the controller and Momentus is its processor (a “service provider” under US state laws): we handle that information only on the studio’s instructions, under our Data Processing Addendum. If you are a guest or client, the studio that ran your event is your first point of contact.

What we collect

From studios

• Account details: name, email address and password. Passwords are handled by our sign-in provider and stored only in hashed form.
• Studio details: studio name, time zone, team members and their roles, and design choices for books (themes, fonts, cover images you upload).
• Your Booth.Events connection: an API key, stored encrypted, and a private webhook address, used only to read your events and receive new prints.
• Billing: plan and payment status. Payments are processed by Stripe; we keep a Stripe customer reference, not your card number.
• A record of key dashboard actions (for example, connecting an integration or changing an account) for security and support.

About clients

• What the studio enters for an event: a display name (for example, “Rachel & Austin”), event date, venue, event type, an optional note from the couple, and the email addresses of people the client invites to view the books.

From guests

• What a guest chooses to write: the name they type, their note (typed text or the drawing of a handwritten note), their sealed advice, their poll votes, and which booth photo they pick to go with their entry.
• A random device ID that the guest book creates and keeps in the browser’s local storage. It is not linked to a name, email or phone number. We use it to let a guest see and manage their own entries, to count one vote per guest, and to count visits.
• Simple activity events tied to that device ID: book opened, page viewed, photo found, note submitted, link shared. Studios see these as totals.
• The guest book also remembers the guest’s name and display settings (light or dark, layout) in local storage on their own device, so they don’t have to re-enter them.

We do not ask guests for an email address, phone number or any account.

Photos from the booth

Lore never stores photo files from your booth. We store Booth.Events photo IDs and ask Booth.Events for a short-lived link each time someone opens a book; those links are kept for less than 24 hours. Photos load directly from Booth.Events’ storage (hosted on Google Cloud), so that service receives the viewer’s IP address, as it already does for the studio’s own galleries. If a studio deletes a photo or event in Booth.Events, it stops showing in Lore.

Booth.Events can send other guest details along with each photo (such as an email address, phone number or survey answers a guest gave at the booth). Lore discards these and never stores them.

From visitors to lorebooth.com

We don’t use advertising trackers or third-party analytics. Fonts and the illustration photos on our sales page are served from our own domain, so your browser doesn’t contact Google or Unsplash when you visit. Our hosting and database providers process IP addresses and request logs to deliver pages and protect the service; we don’t store IP addresses in Lore’s own database.

Cookies and local storage

We only store things on your device that Lore needs to work. We don’t use advertising or cross-site tracking cookies, so we don’t show a cookie banner.

Clearing your browser’s site data removes all of them.

How we use information

• To run Lore: show books, place each booth session on its own page, save notes and votes, and give studios and clients their dashboards.
• To keep books kind: typed notes and names pass through an automatic word-list filter. Anything it catches waits for the studio to approve. This is a simple word list; we don’t use AI to read or judge entries, and handwritten notes aren’t scanned.
• To bill studios, provide support, send account emails (such as sign-in links), keep the service secure, and meet legal obligations.

We do not sell or rent personal information, share it for cross-context behavioral advertising, or use it to train AI models.

Emails we send

• Account emails go to studios and clients when needed to run Lore: sign-in links, invitations to view a book, billing receipts, renewal reminders, and notices about security or changes to these terms. You can’t opt out of these while you have an account, but we keep them to what’s necessary.
• Product news (new features, tips for selling Lore) goes only to studio owners and staff who opt in, and every one has an unsubscribe link. Unsubscribing doesn’t affect account emails.
• Clients and guests never get marketing from us. We don’t collect guest email addresses, and we use client email addresses only for sign-in links and book invitations.

Who can see what

• Book contents are shared by link. Anyone with a book’s link or QR code can open it. Guestbook notes are visible to everyone as soon as they are posted (unless the studio turns on approval). Advice stays sealed until the date the studio sets. Party Polls results may show right away or after a reveal.
• The studio can see everything in its own books, hide any entry, and switch a book to approval mode.
• The client and the people they invite can see their books, and the studio may let them hide entries.
• Momentus staff can access data only to run, support and secure the service.

Service providers

We use these providers to run Lore. They handle information only to provide their service to us.

If we add a provider, we’ll list it here before we start using it. We may also share information if the law requires it, to protect people or the service, or as part of a merger or sale of Momentus, in which case this policy continues to apply.

How long we keep it

• Books and everything in them are kept while the studio subscribes.
• When a studio cancels, its books stay readable for 30 days so the studio and its clients can export them. After that, the studio’s books, entries and votes are deleted.
• A studio can delete an event or hide an entry at any time.
• Photo links are cached for less than 24 hours; photos are visible only while the studio keeps the event in Booth.Events.
• Visit counts (the activity events tied to a guest’s device ID) are kept for up to 13 months, then deleted.
• Database backups are kept for 7 days and then overwritten.
• Billing records are kept as long as tax and accounting law requires.

Your choices and rights

Guests: to change or remove something you wrote, ask the couple or the photo booth studio, who can hide it, or email us at support@lorebooth.com with the book link and the name you used. Because guests don’t have accounts, we may ask for details that show the entry is yours, and we may pass the request to the studio.

Studios and clients: you can see and update your details in the dashboard, and ask us for a copy or deletion of your information.

Wherever you live, you can ask us to access, correct, delete or give you a copy of your personal information, to restrict or object to how we use it, and to withdraw any consent you gave. We won’t treat you differently for asking. Email support@lorebooth.com and we’ll respond within 30 days (45 days where US state law allows). If a request is about a book, we’ll involve the studio, because it decides what goes in its books. You can also have an authorized agent make a request for you, and appeal if we decline (reply to our decision to appeal).

Regional information

European Economic Area, United Kingdom and Switzerland

Our legal bases are: performing our contract with studios (running their accounts and books); our legitimate interests in operating, securing and improving Lore and preventing abuse (word-list filter, rate limits, visit counts); our legal obligations (tax and accounting records); and, for guests’ book content, the studio’s own legal basis, since we process it on the studio’s behalf. You can complain to your local data protection authority. If Lore is required to appoint a representative in the EU or the UK, we’ll name them here.

Lore stores data in the United States. We protect transfers with the EU Standard Contractual Clauses, the UK International Data Transfer Addendum and, where our providers are certified, the EU-US Data Privacy Framework and its UK and Swiss extensions.

We don’t use automated decision-making that has legal or similarly significant effects on you. The word-list filter only holds a note for a person at the studio to review.

United States

In the past 12 months we have collected these categories of personal information: identifiers (name, email, device ID), commercial information (subscription and billing records), internet activity in Lore (pages viewed in a book), and content you write (notes, advice, votes). We collect them from you, from studios and from Booth.Events, for the purposes in “How we use information”. We disclose them only to the service providers listed above. We do not sell or share personal information as California law defines those terms, and we don’t collect sensitive personal information. Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws can use the rights above.

Canada

We handle personal information under PIPEDA and applicable provincial laws, including Quebec’s Law 25. The person responsible for privacy at Momentus is our Privacy Officer, the owner of Momentus LLC, reachable at support@lorebooth.com.

Australia, New Zealand, Brazil and elsewhere

We follow the Australian Privacy Principles, the New Zealand Privacy Act and Brazil’s LGPD where they apply, and you can use the rights above and complain to your local privacy regulator. Our contact for these requests is the same email address.

Children

Studios and clients must be at least 18. Lore is not directed at children, but guests at family events can include young people, and guest books don’t ask anyone’s age. If you believe a child under 13 has shared personal information in a book, contact us and we’ll work with the studio to remove it.

Security

Data is encrypted in transit. Every database table is protected so studios can reach only their own data, guests never touch the database directly (their entries go through our server functions), and Booth.Events keys are stored encrypted. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.

Where data is stored

Lore stores data in the United States. If you use Lore from another country, your information will be transferred to and processed in the United States, protected as described under “Regional information”. Studios can review our Data Processing Addendum and list of subprocessors.

What this policy doesn’t cover

Studios decide what happens at their events and in their client relationships. This policy covers Lore only; it doesn’t cover how a studio, its clients or Booth.Events collect or use information outside Lore, which their own policies govern. We aren’t responsible for what studios, clients or guests choose to post in a book, or for third-party websites and services linked from Lore.

Changes

If we make material changes, we’ll update the date above and tell studios by email or in the dashboard before the change takes effect.

Contact

Momentus LLC
11209 NE 141st Pl
Kirkland, WA 98034
United States
Email: support@lorebooth.com