Built for private moments.

Candidrop stores guest-uploaded originals privately and exposes only approved display copies according to each event’s settings. Event pages are excluded from search indexing.

Event data

Hosts control gallery access, moderation, sharing, downloads, and event retention. Guests receive an anonymous device session so names remain optional unless the host explicitly requires one.

Identity

Hosts may sign in through a one-time email link or Google. Candidrop receives the verified email and optional display name needed to identify the account; passwords remain with the selected identity provider.

Media

Original files are accessible only to the event owner. Display and thumbnail variants are stored separately so the gallery never needs to load full-resolution originals.

Retention and deletion

A host can delete an event at any time from its settings. Guest links, galleries, and stored media stop working immediately, including direct links to individual photos. The event stays recoverable by its owner for 30 days, after which every photo, video, comment, reaction, vote, guest session, and analytics record belonging to it is permanently erased. A host who needs data removed sooner can choose permanent deletion, which destroys the stored files and records straight away with no recovery period. To request deletion of an event you appeared in, contact the event’s host or privacy@candidrop.app.

Event team access

A host may give colleagues co-manager, moderator, or trusted-uploader access to a single event by email address. Co-managers and moderators can review uploads awaiting approval, which includes media that has not been published to the gallery. Access is granted per event, never across a whole account, and the host can remove it at any time.

Analytics

We use Google Analytics on our marketing and host pages to understand which pages people find useful. It sets cookies and shares the pages you view with Google. Guest event pages are deliberately excluded: their web address contains the event code that opens a private gallery, so those visits are never sent to an analytics provider. You can opt out with Google’s browser add-on or by blocking analytics cookies, and Candidrop keeps working either way.

Marketing email

When you create a host account we send product news and offers for Candidrop to that address, and you are told so at sign-up. Every one of those messages carries a working unsubscribe link and our postal address. Unsubscribing stops the marketing but never the transactional email you need, such as sign-in links, team invitations, and receipts.

Guests and invited teammates are treated differently, because those addresses reach us so that an event can run rather than so that we can sell to anyone. We do not send them offers unless they ask us to. After an event they may receive a single message asking how Candidrop worked for them; that message carries no offer, tells them why they are receiving it, and gives them both a way to hear from us in future and a way to be left alone. Only someone who takes up that invitation joins the marketing list.

We do not sell or rent any address, and any partner offer is sent by us rather than by handing your details to a third party.

Questions

Contact privacy@candidrop.app, or write to Ramy LLC, PO 134, Phoenix, MD 21131. A full production legal policy should be reviewed before commercial launch.