Privacy is how Lenso is built, not a setting you configure.
Every event runs on the same guarantees, on by default, whether you’re hosting a birthday or running a corporate off-site with a legal team watching.
Five things every gallery gets, no plan required.
These aren’t upsells. They run on the Free plan the same as they do on Business.
EXIF location stripping
GPS coordinates are removed server-side before any photo or video is stored. Guests’ locations are never captured or exposed, even by accident.
Explicit consent flow
Every guest sees a plain-language consent screen before they can shoot or upload anything. Active agreement, not a checkbox buried in fine print.
Retention timer you control
Hosts set how long a gallery stays online. When the timer expires, it deletes itself automatically, no manual cleanup, no forgotten data.
Guest delete-by-token
Any guest can remove their own photo or video at any time, with no account and no need to contact the host.
EU-hosted infrastructure
Data lives on EU infrastructure (Supabase Frankfurt, Cloudflare WEUR). A GDPR baseline out of the box, not a separate region to request.
Hosts see their own event. Nothing else.
Every table in the database is protected by row-level security policies, so one host’s gallery is never reachable from another host’s account, and guest uploads only ever reach the event they were taken at.
The App Clip forgets, on purpose.
On iPhone, guests join through an App Clip: Apple streams it on demand, nothing is installed, and iOS clears it away automatically after the event. No lingering app, no background access, no account — the guest’s phone is exactly as it was before the party.
Who else touches your data.
We keep the list short and public.
Supabase
Database, authentication and realtime updates. Hosted in Frankfurt, EU.
Cloudflare R2
Photo and video storage. WEUR region, no egress fees, no third-party access.
Resend
Transactional email only: receipts, verification and account notices.
Vercel
Application hosting and edge delivery.
Full detail, legal basis and data-subject rights are in the privacy policy →
Private by design, for every guest, every time.
Free while we launch. Nothing for your guests to download. Set up in two minutes.