SVEN

The small print

Privacy Policy

BarBooth is a shared photo wall for bars. This policy explains what we collect when you scan a BarBooth, add a photo or run a bar on BarBooth, why we collect it, and what you can do about it. We’ve kept it as short and plain as we can.

The short version

  • You don’t need an account to add a photo. We never ask guests for their name, email or phone number.
  • Every photo is checked automatically before it’s shown, stays on the wall for 7 days and is then deleted. You can take yours down any time.
  • The photos shown in the album have location and camera data removed.
  • We measure how BarBooth is used with our own analytics, never with ad networks, and we never sell your data.
  • Bars pay through Stripe. We never see card numbers.

Who we are

BarBooth is run by Blippkey AB (company reg. no. 559392-6073), Elsa Borgs gata 2, 129 31 Hägersten, Sweden (“BarBooth”, “we”, “us”). We are the controller of the personal data described here. Questions and requests go to support@barbooth.app.

This policy covers barbooth.app, the BarBooth album at album.barbooth.app, the BarBooth App Clip on iPhone and the BarBooth dashboard. The full Drinkly app has its own privacy policy.

When you scan a BarBooth

Photos you add

When you add a photo we receive the image, its size and dimensions, the BarBooth it was added through and the time. It’s checked automatically (see Moderation below), and if it passes it’s shown in the bar’s album together with the BarBooth’s name and when it was added.

Anyone who opens the album can see it, including people the bar shares the album link with and screens at the bar. The bar sees the photos in its dashboard too. Only add photos you, and everyone in them, are happy for others to see.

Photos can carry hidden details such as where and when they were taken. The copies shown in the album are delivered with those details removed.

How long photos are kept

A photo stays in the album for 7 days and is then deleted. You can take your own photo down at any time, and it’s deleted straight away. The file you upload is only kept while it’s checked and prepared for the album, normally a few seconds, and is then deleted. Photos that don’t pass the check are deleted at once and never shown.

Once a photo is gone we keep a short record of the upload, without the photo itself: when it was added, through which BarBooth, the device ID and the result of the check. We use it to keep to one photo per device, handle reports of abuse and count uploads.

Your device

To keep it to one photo per device and stop spam, your phone gets a random device ID the first time you add a photo. On iPhone the App Clip proves it’s a genuine copy through Apple’s App Attest. In the browser, Cloudflare Turnstile checks that you’re a person and not a bot, and the device ID is kept in a cookie for up to 180 days. The device ID isn’t linked to your name or contact details.

Moderation

Every photo is checked by Sightengine, an image moderation service, before it’s shown. Sightengine receives the photo only to score it for nudity, weapons and gore, and photos over our limits are turned away. The check is automatic; if you think a photo was turned away by mistake, try another one or write to us.

The Drinkly game

The album’s Drinkly tab has a free round of the Drinkly party game. The game runs on your phone; we only record events such as a game starting or ending (see Usage analytics). If you then install the Drinkly app, BarBooth lets it know you’ve already played the free deck so it can offer you a fresh one: on iPhone through a small file shared by the App Clip and the app, on Android through the Google Play install link. Nothing else is passed on.

Usage analytics

To understand how BarBooth is used and make it better, the App Clip and the web album send usage data to our own analytics service, which runs on Cloudflare. It’s tied to a random ID created when you first open BarBooth, not to who you are, and includes:

  • Your device model, operating system, app or browser version, language and time zone
  • Your IP address, the approximate location it points to (country, region, city, postal code and coordinates) and your network provider
  • Which bar’s BarBooth you scanned, how you got there (such as the link or campaign you came from) and which screens you open
  • What you do, such as photos added or viewed, games played and how long you stay

We use it to run and improve BarBooth and to show each bar numbers about its own album, such as scans per BarBooth and the busiest hours. Bars only see totals, never data about individual guests. Individual events are deleted after about 13 months; summaries of visits are kept for long-term statistics.

In the browser, the analytics ID and events not yet sent are saved in your browser’s storage, as are your game language and whether you’ve seen the game’s guide. Clearing the site data for album.barbooth.app resets them.

When your bar uses BarBooth

Your account

When a bar signs up we collect the bar’s name and the name, work email and language of the person signing up. You sign in with a one-time code or link sent to your email. We only store the codes in scrambled (hashed) form, use a cookie to keep you signed in, and record when you last signed in.

Payments

Payments are handled by Stripe. Card, Apple Pay, Google Pay and Link details go straight to Stripe and never reach our servers. We store your Stripe customer and subscription IDs, your plan, how many BarBooths you have and whether the plan is paid. Stripe holds your billing details, VAT number and invoices, and uses some data to prevent fraud under its own privacy policy.

Delivery

To send your BarBooths we store the delivery name, address, phone number and any delivery instructions, and share them with the postal or courier service that delivers the order. The phone number is only for the courier.

Email

We email sign-in codes, order and shipping confirmations, and messages about your plan and payments. We don’t send newsletters or marketing.

Cookies and our website

BarBooth uses no advertising or third-party analytics tools, and only the cookies it needs to work: one that keeps you signed in to the dashboard, and the device cookie in the album described above. When you sign up, Cloudflare Turnstile checks that you’re a person, and at checkout Stripe may set its own cookies to prevent fraud. As these are strictly necessary, we don’t ask for consent to them.

Like any website, our servers briefly log requests, including IP addresses, to keep BarBooth secure, limit abuse and fix problems. These logs are deleted after a few days.

Who we share it with

We never sell personal data or share it with advertisers. These providers help us run BarBooth and may only use the data to do that for us:

  • Cloudflare: hosting, databases, photo storage and delivery, email and bot checks (Turnstile)
  • Sightengine (France): photo moderation
  • Stripe: payments, invoices and fraud prevention
  • The postal or courier service that delivers BarBooths

Apple and Google provide the App Clip, App Attest and the Play Store install link under their own terms. We may also disclose data when the law requires it, for example to the police, or to protect someone from harm.

Transfers outside the EU

Some of our providers, such as Cloudflare and Stripe, are based in the United States or run global networks, so data may be processed outside the EU/EEA. These transfers are covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

  • Photos: up to 7 days in the album, or until you take them down. The uploaded file only while it’s checked and prepared, normally a few seconds. Photos that don’t pass the check are deleted at once.
  • Upload records (without the photo): for as long as the bar’s album exists.
  • Usage events: about 13 months. Summaries of visits: for as long as they’re useful for statistics.
  • Dashboard accounts and bar details: for as long as the account exists. When a bar leaves BarBooth, we delete them on request, except what we must keep by law.
  • Accounting records: 7 years, as the Swedish Bookkeeping Act requires.
  • Server logs: a few days.

Your rights

You have the right to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to get a copy of data you gave us in a format you can take elsewhere.

To use any of these, write to support@barbooth.app. Guests don’t have an account, so tell us which bar, and roughly when, and we’ll find it. We answer within a month. You can always take your own photo down yourself, straight from the album.

If you’re unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY) or the data protection authority where you live.

Children

BarBooth is made for bars and their guests and isn’t aimed at children. Photos of children should only be added with a parent’s or guardian’s permission. If you think we hold a photo or data about a child that shouldn’t be there, write to support@barbooth.app and we’ll remove it.

Security

All traffic to BarBooth is encrypted, sign-in codes and session tokens are stored hashed, photos are checked before anyone sees them, and only the people who need it can reach our systems, behind protected sign-in.

Changes to this policy

We’ll update this policy when BarBooth changes. The date at the top shows the latest version, and we email bars before significant changes take effect.