Privacy Policy
Last updated: May 22, 2026
Who we are
Klik ("we", "us", "our") is a collaborative photo-sharing service operated by Klik SAS, reachable at contact@klik.photo. This policy explains what personal data we collect, why we collect it, and how you can exercise your rights under the GDPR.
Data we collect
We collect: (1) Account data: name, email address, hashed password when you register. (2) Event data: event name, type, sections, and settings you create. (3) Guest-uploaded content: photos (and videos on eligible plans) submitted through an event link. (4) Usage data: page views, upload counts, and feature interactions collected via server-side analytics. (5) Payment data: processed exclusively by Stripe; we never store full card numbers.
How we use your data
We use your data to: provide and improve the Klik service; send transactional emails (account verification, gallery expiry reminders, purchase receipts); analyse aggregate usage to improve the product. We do not sell your data or use it for advertising.
Legal basis
We process your data on the following legal bases under GDPR Article 6: contract performance (delivering the service you signed up for); legitimate interests (service improvement, fraud prevention); legal obligation (responding to lawful requests); and consent (where explicitly given, e.g. optional marketing emails).
Data retention
Account data is kept for as long as your account is active. Event photos are retained for the gallery life of your plan (90 days for Free, 12 months for paid plans, indefinitely for active Pro subscriptions). After expiry, photos are permanently deleted from our servers within 30 days. You can request immediate deletion at any time via the GDPR request form.
Your rights
Under the GDPR you have the right to access, correct, port, or delete your personal data at any time. To exercise these rights, use our GDPR request form or email contact@klik.photo. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
Cookies and local storage
Klik works with a small amount of strictly necessary browser storage: an authentication token and short-lived security cookies (sign-in and protected-event access), plus functional preferences such as your language and gallery sort order. To handle uploads and offline access, the app also uses IndexedDB (an upload queue) and a service-worker cache for photos. These are exempt from consent because the service cannot work without them. Display fonts are served by Google Fonts. We use no advertising cookies and no cross-site tracking. Our only optional, non-essential tool is Sentry, used for error and performance monitoring; where analytics consent is enabled, you can accept or refuse it and change your choice at any time using the Cookie settings link in the footer.
Data transfers
All data is stored and processed within the European Union. We do not transfer personal data to third countries. Our infrastructure is hosted on Scaleway (Paris region). Stripe, our payment processor, is certified under the EU-US Data Privacy Framework.
Contact
For any privacy-related question, contact us at contact@klik.photo.
Your rights
To remove a specific photo or video that shows you, use the Report button on that item in the gallery and choose the privacy option. If you cannot access the gallery, contact our data protection team:
contact@klik.photo