Terms of Use & Privacy Policy

Sharetoast (“we”, “us”) lets a person create a shared photo album for an event (the “Host”). People the Host invites (“Guests”) can add photos to the album with no account, and everyone in the album can view and download its photos. The service accepts photos only, not video.

By creating an album, joining an album, or uploading or viewing photos, you agree to these Terms and the Privacy section below. If you don’t agree, please don’t use the service. The service is intended for use in the United States.

You must be at least 18 to create an album. If you are under 18, you may join an album only with the permission of a parent or guardian. Sharetoast is not directed to children under 13, and we do not knowingly collect personal information from them.

Hosts are responsible for their album, including who receives the link, QR code or party code, and the photos that appear in it. Hosts can remove any photo from their album and should do so promptly if something inappropriate appears. Hosts are responsible for getting any permission that the law requires from the people at their event, and for telling guests that photos will be shared with everyone in the album.

Guests may upload only photos they took or have the right to share. A guest can delete the photos they uploaded from the same browser. Anyone who has the album link or code can view and download all photos in the album, so only share photos you are comfortable with everyone at the event seeing.

The album link and party code work like a shared password. Keep them to the people you intend to invite. We can’t control what people do with photos they have downloaded.

Sexual and explicit content is strictly prohibited. You may not upload, post or share:

• nudity, pornography, sexually explicit or sexually suggestive material of any kind;
• any sexual or exploitative material involving a person under 18. We have zero tolerance. We will remove it, preserve the evidence, and report it to the National Center for Missing & Exploited Children (NCMEC) and law enforcement, as the law requires;
• graphic violence or gore, or content that promotes hate, harassment, threats or self-harm;
• content that is illegal, or that infringes someone’s copyright, trademark or privacy (including intimate images shared without consent);
• files that are not photos, or anything intended to harm devices or services (malware), or spam and unrelated storage or hosting.

We may remove any content, close any album, and suspend or ban any Host or Guest at any time, without notice, if we believe these rules are broken or the service is being misused. We may refuse a refund where an album was closed for violating these Terms.

Sharetoast is a hosting platform. Photos, captions and names in an album are created and uploaded by Hosts and Guests, not by us. We do not review, screen, endorse or control user content before or after it is uploaded, and we have no duty to monitor it.

To the fullest extent permitted by law, we are not responsible or liable for any photo or other content uploaded by a Host or a Guest, including content that is sexual, explicit, offensive, inaccurate, unlawful or infringing, or for any harm that results from viewing, downloading or sharing it. If you encounter content you object to, please stop viewing it and report it (see section 5). The person who uploaded the content, and the Host of the album, are responsible for it.

You are responsible for your own conduct and for any content you upload, and you agree to indemnify and hold us harmless from claims, losses and expenses (including reasonable legal fees) arising from content you upload or your breach of these Terms.

To report a photo or an album, email abuse@sharetoast.com with the album link and a description of the problem. We aim to review reports promptly and will remove content that violates these Terms. Hosts can also remove any photo in their own album at any time.

If you believe content infringes your copyright, send a notice to the same address that identifies the work, the location of the material, your contact details, a statement of good-faith belief that the use is not authorized, and a statement under penalty of perjury that your notice is accurate and that you are the owner or authorized to act for the owner. We respond to valid notices under the Digital Millennium Copyright Act.

You keep ownership of your photos. By uploading a photo, you give Sharetoast a limited, non-exclusive, worldwide license to store, copy, resize, convert, display and deliver it (including in downloadable ZIP files) only to operate the service for the people in that album. We do not use your photos for advertising, do not sell them, and do not use them to train artificial-intelligence models. The license ends when the photo is deleted, subject to the backup period in section 9.

What we collect

• Hosts: email address, event title, date, time zone and description, the party code, and your acceptance of these Terms (version and time). If you choose to, an album photo and the wording and style of your QR card. The album photo is shown to everyone who opens the album link (before they join, like the album’s title) and printed on your card; it is deleted with the album.
• Guests: the first and last name you type, the photos you upload, any captions, and file names. No account, email address or password is needed.
• Photo metadata: photos can contain hidden information added by the camera, such as the time, the phone model and sometimes the location where a photo was taken. When a photo is uploaded we remove this hidden information (location, camera details, comments) from the stored copy, so people who download it do not receive it. We cannot remove anything that is visible in the picture itself, such as a street sign.
• Technical data: IP address, browser and device type, and request logs, used for security, rate limiting and abuse prevention.
• Payments: handled by our payment providers, Stripe (cards) and PayPal. We receive confirmation that you paid, the amount, and a transaction reference, but never your full card number, bank details or PayPal password.
• Cookies: in albums and your dashboard we use only strictly necessary cookies, which remember your name, which photos you uploaded and that you are signed in.
• Ad measurement (public pages only): on our public pages (the home page, the album-creation page, our guides and these Terms) we use the Meta Pixel to measure our own Facebook and Instagram ads. It sets a cookie and tells Meta which of these pages you visited, when you create an album (and whether it is a free trial), and, when you pay to unlock an album, that a purchase happened and its amount, so we can see which ads work and show our ads to people likely to be interested. That purchase notice is the only thing sent after you leave the public pages, and it does not include the album’s address. The Pixel never runs in albums, dashboards or our admin site, never sees your photos, and we do not send Meta your email address or name. You can turn it off on this device below, and we do not load it when your browser sends a Global Privacy Control signal.

How we use it: to run the album (show names and photos to the people in it), send you your album link and reminders, process payments, keep the service secure, prevent abuse, and meet legal obligations.

Who can see your photos: everyone who has the album link or party code, and our staff only when needed for support, security, abuse review or legal reasons. Albums are not public and are asked not to be indexed by search engines, but they are not private from other guests.

Who we share data with: service providers that help us operate, namely Amazon Web Services (hosting and storage), our payment processors (Stripe and PayPal), our email delivery provider and, for ad measurement on our public pages only, Meta, and only as needed for those services. We may disclose information if required by law, to report child sexual abuse material, or to protect people and the service. We do not sell or rent personal information.

Your choices and rights: you can delete your own photos at any time. A Host can delete any photo. You may ask us to access, correct or delete personal information we hold about you (for example, residents of California and other states with privacy laws have these rights) by emailing support@sharetoast.com. We will not discriminate against you for exercising your rights.

Your information is stored in the United States.

All traffic between your device and Sharetoast is encrypted in transit using HTTPS (TLS). Photos and album data are encrypted at rest on our cloud infrastructure. Each album has its own storage area, and access requires the album’s link or code. Uploaded files are checked to confirm they are real image files.

No system is perfectly secure, and these protections are not “end-to-end” encryption: our systems must be able to process photos to display, resize and package them for you. We work to protect your data, but we can’t guarantee absolute security. Please keep your album link and code confidential.

We keep photos only as long as needed to run the album, then permanently delete them:

• Trial albums that are never upgraded: available for 7 days, then closed. They are permanently deleted 30 days after that, or, once the Host has confirmed their email address, 20 days after the event date if that is later (so an album made well before the event can still be upgraded in time), unless the Host upgrades first.
• Albums created to pay for up front (after the free trials are used) that are never paid: guests can’t open them, and they are permanently deleted 30 days after they were created.
• Paid albums are kept for 12 months. Guests can add photos from when the album is unlocked through 20 days after the event. Guests and the Host can view and download photos from when the album is unlocked through 365 days after the event (12 months). The Host can also remove photos from their dashboard during that time. After the 365 days the album and all its photos are permanently deleted.
• Individual photos: when a Host or the uploading Guest deletes a photo, it is removed immediately and cannot be recovered.
• Backups and caches: copies may persist in protected backups for up to 30 days after deletion before they are overwritten.

Download your photos before the deletion date. We send reminder emails to the Host, but we are not obligated to keep or recover photos after the schedule above. You may also ask us to delete an album sooner.

You can try Sharetoast free for 7 days. A trial album holds up to 25 photos from up to 10 guests; everyone can view them, and downloading opens once the album is unlocked. Guests can join an album only after its Host has confirmed their email address (by opening the link we send). Each email address can start up to 3 free trial albums in any 30-day period (variations of an address, such as ones that differ only by a “+” tag, count as the same address), and albums you have paid for do not count toward that limit. Temporary or disposable email addresses can’t be used to create an album. Unlocking an album for a single event costs the price shown at checkout (currently $39.99, one time, plus any applicable tax). There are no per-guest or per-photo fees. The printable QR card is available for every album, including trial albums.

Discount codes. A discount code lowers the price of unlocking an album, or makes it free, for the time and number of uses stated when we issue it. Each code can be used once per customer (an email address counts as one customer) and once per album, cannot be combined with another code, has no cash value, and cannot be transferred, sold or exchanged. We may refuse, withdraw or cancel a code, and we may remove the discount from an album, if a code was obtained or used in a way we did not intend (for example by creating extra accounts). A paid unlock never costs less than $1.00. If you are refunded, any discount you received is not paid out.

You can pay by card (through Stripe) or with PayPal. Payment is processed securely by those providers and your album unlocks as soon as they confirm it. If something prevents the service from working for your event, or you haven’t used it, email us within 14 days of purchase and we will refund you to the original payment method. If you accidentally pay twice for the same album, we will refund the extra payment. Refunds are not available for albums closed for violating these Terms. If a payment is refunded, reversed, or lost in a dispute or chargeback, the album returns to unpaid: downloads stop, guests can no longer join once the trial period has passed, and it is deleted 30 days later (for an album that began as a trial, 20 days after the event date if that is later) unless it is unlocked again. While a dispute about a payment is open, downloads for that album are paused.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. We don’t promise the service will be uninterrupted or error-free, or that photos will never be lost. Keep your own copies of photos that matter to you.

TO THE FULLEST EXTENT PERMITTED BY LAW, SHARETOAST WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST DATA, PROFITS OR GOODWILL, AND OUR TOTAL LIABILITY FOR ANY CLAIM RELATING TO THE SERVICE WILL NOT EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS BEFORE THE CLAIM (OR $39.99 IF YOU PAID NOTHING). Some states don’t allow certain limits, so parts of this section may not apply to you.

• Changes. We may update these Terms. Each album records the version its Host accepted. If we make a material change, we will post it here with a new effective date and, where appropriate, tell Hosts by email. Continued use after a change means you accept it.
• Termination. You can stop using the service at any time. We may suspend or end access for violations of these Terms or for legal reasons.
• Governing law. These Terms are governed by the laws of the State of Texas and applicable U.S. federal law, without regard to conflict-of-law rules. Courts located in that state have exclusive jurisdiction, except where the law gives you the right to bring a claim elsewhere.
• Everything else. If part of these Terms is found unenforceable, the rest stays in effect. These Terms are the whole agreement between you and us about the service.

Questions, privacy requests or refund requests: support@sharetoast.com. Reports of abuse or illegal content: abuse@sharetoast.com.