Where your photos live
Your photos and your event data are stored in Germany. Six other companies touch parts of it to make the product work, and they're all named below. We don't sell it, we don't train AI on it, we don't run ads against it, we don't scan it, and we delete it when your event is over.
Below is every company involved, what each one can see, and which country it's in, so you can check instead of taking our word for it.
Your photos
OVHcloud object storage · Frankfurt, Germany
Photos, video and voice memos are held at the resolution your guests uploaded them, on OVHcloud object storage in Frankfurt. They aren't copied to another region and they aren't served from anywhere else.
Germany means German and EU data protection law applies to your wedding photos, which is among the strictest anywhere in the world. That isn't a policy we've written; it's a legal floor underneath us that we can't lower.
Your event data
Supabase · Frankfurt, Germany
Your guest list, RSVP answers, programme and settings are in a PostgreSQL database hosted by Supabase, also in Frankfurt. Same country, same law, same standard.
Guests' names and answers are visible to you and to nobody else using Twirl.
Who else touches it
Everything that runs Twirl, what it can see, and where it is.
| Service | What it can see | Where |
|---|---|---|
| OVHcloud | Stores photos, video and voice memos | Frankfurt, Germany |
| Supabase | Database and login: guest list, RSVP answers, event settings, your email | Frankfurt, Germany |
| Vercel | Runs the website and app: requests in transit, no media at rest | EU |
| Stripe | Takes the €25 payment: your name, email and payment details. We never see the card | EU |
| Brevo | Sends the emails: your address and the contents of those emails | France |
| Sentry | Records errors so we can fix them: technical detail only, no photos, no guest data | EU |
Every one of these runs in the EU. If this list changes, this page changes.
What we never do
Not to advertisers, not to data brokers, not to anyone.
Not ours, not anyone else's.
There is no ad tech on this site or in your event, so there's nothing to profile you for.
Not for content, not for faces, not for anything else.
The only time a person here opens your event is if you or your guests ask us to.
When you're finished
Your event runs for two months from the first upload. Download whatever you want during that time, as often as you like.
At the end of the two months, uploads close, guest access closes, and everything is deleted: photos, video, voice memos, the guest list and every reply.
If you want longer, you can add time a month at a time: €10 to keep it open for everyone, or €5 a month closes new uploads and keeps everything already there open to view and download, for you and your guests. Neither renews on its own.
You can also delete the whole thing yourself at any point before that. It's gone from our systems and our backups within 30 days.
Cookies
What's needed to keep them logged into your event, and nothing else. No tracking, no advertising cookies, no third-party pixels.
We ask permission for all cookies and declining anything optional does not change anything about how the website works for you.