Privacy Policy

Last updated: September 10, 2026

This page explains what data Shotter collects and why, for both photographers and guests.

Shotter is registered with the Dutch Chamber of Commerce (KVK) under number 97419575, at Cissy van Marxveldtstraat 71, 1321 LL Almere, the Netherlands. VAT number NL005268653B64. Questions about these terms or your data: contact@shotter.app.

For photographers

We store your account details (name, email, business name), the media you upload, event and pricing information, and — if you connect Mollie — payout account details. If you use managed storage, your media is stored on Shotter's infrastructure; if you bring your own bucket, your storage credentials are encrypted at rest and used only to access your bucket on your behalf.

For gallery guests

Viewing a gallery preview doesn't require an account. To unlock a gallery, we collect your email address (to send your receipt and a link back to your unlocked photos) and process payment through the photographer's own Mollie account — we don't see or store your card details. A signed cookie is set in your browser so you don't have to pay again to view your unlocked gallery.

Who we share data with

Payments are processed by Mollie: gallery purchases through the photographer's own connected account, and Shotter's subscription billing through ours. Transactional emails (receipts, reminders, password resets) are sent through Resend. Cloudflare provides network protection and delivery, stores media on the managed storage tier, plays back video, and runs the bot check on sign-in and checkout forms. Sentry receives error reports when something breaks, which can include technical details of the request that failed. Photographers who bring their own bucket store media with the S3-compatible provider they choose. We don't sell personal data to third parties.

Retention

Gallery media is retained until the photographer deletes the event or its display period ends, per the photographer's settings. Account and purchase records are kept as needed for billing, tax, and fraud-prevention purposes. If a photographer deletes their account, we delete their media and anonymise the account; invoices and payment records are kept for seven years, as Dutch tax law requires.

Your rights

You can request access to, correction of, or deletion of your personal data by contacting the photographer (for gallery/purchase data) or Shotter directly (for account data), subject to what we're legally required to retain.

See also our Terms of Service, or get in touch.