Privacy
What we store, why, for how long, and what we cannot do. Last updated 18 August 2026.
Who is responsible
Burak Sengür operates wedlery. Contact: hello@wedlery.com, or see the imprint.
For your account and the running of the service, we decide what is stored and why. For the photographs inside a gallery, the couple who created it decides who may open it and what stays visible; we store and serve those files on their behalf.
What we store
Your account. Email address, the name you give, a hash of your password, and sign-in sessions. We never see your password itself.
Your gallery. The names shown on it, the wedding date and timezone if you give them, your language preference, and the access codes printed on your cards.
What guests upload. The photo or video itself, the capture time recorded by the camera, and the name and caption a guest chooses to add. Nothing else from the file is kept.
Technical data about guests, deliberately minimised. We do not store a guest's IP address and we do not store their browser or device string at all. What we keep instead are two irreversible hashes, computed with a secret unique to that one gallery: one lets a phone recognise its own uploads so the guest can take a photo back down, the other is used to rate-limit abuse. They cannot be reversed into an IP address, and a hash from one gallery cannot be matched against another.
Email we send you. The recipient, which kind of message it was, and whether it was delivered or bounced. The text of a message is kept only until the mail provider accepts it, then discarded.
Payments. Card details never reach our servers — Stripe collects and holds them. We store the amount, the currency, and Stripe's references, which is what lets us prove what you bought.
We do not sell any of this, do not use it for advertising, and do not use your photographs to train anything.
How long we keep it
A gallery on the free plan is kept for 30 days after the wedding. A gallery on the Complete plan is kept for 12 months from the wedding date, and can be extended. That date only ever moves later, never earlier — no action by us or by you shortens storage you have already been promised.
Before anything is deleted we email you about it repeatedly, starting two months ahead, and again when the date passes. Files are then removed after a further 30-day grace period, and only once we have evidence that at least one of those warnings actually reached your inbox. If we cannot show that, nothing is deleted.
After deletion we keep a small record that the gallery existed, that it was warned about, and when it was removed. That record is what answers a later question about what happened, and it holds no photographs.
Your account survives your galleries. Ask us and we will delete it.
Who else is involved
Hetzner Online GmbH — the servers, in Nuremberg, Germany. Every photograph and every database row lives there.
Stripe — payments, and the only party that sees your card details.
Resend — the emails we send you.
Cloudflare — the domain's DNS and the forwarding of mail sent to our contact address.
Stripe, Resend and Cloudflare are US companies and may process data outside Switzerland and the EU under the standard safeguards for such transfers. The photographs themselves stay in Germany.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to a particular use. Write to hello@wedlery.com. If you are unhappy with how we answer, you can complain to the Swiss Federal Data Protection and Information Commissioner, or to your own supervisory authority if you are in the EU.
You can download every original from your gallery at any time, in one archive, without asking us.
What we cannot do
These are real limits of how the product is built, and we would rather state them than discover them together later.
We cannot pick out one guest's uploads on request. Guests have no account, and the identifiers described above are one-way. If you want a specific photograph removed, point us at it in the gallery — or ask the couple, who can hide anything themselves, instantly.
Removing a photo hides it rather than erasing it. It disappears from the gallery for everyone straight away and stays gone. The underlying file is deleted when the gallery itself is deleted.
There is no second copy of your photographs. They live on one server. Download your originals — that is what the button is for.
Changes
If this notice changes in a way that matters, we will email the address on your account rather than quietly editing the page.