Privacy
Kept holds video of people at your event, your email address, and the address a box was mailed to. Here is every piece of that, where it sits, who can reach it, and how to have it taken down.
Last updated July 24, 2026What is collected
From a host
- Email address and password. The password is stored as a scrypt hash with a random salt, so the text you typed is not readable by anyone here.
- Event details you type in. The event name, its short code, and the password you set on the gallery if you set one.
- Shipping name and address, when you order a kit, so the box can be mailed to you.
- A photo you upload, if you order a paint kit from one of your event pictures.
From a guest
- The name typed on the record screen. A guest fills that in however they like. It is not checked against anything.
- The video and its audio, along with the sticker code it was recorded against and the time it was recorded.
From every visit
Ordinary server logs: IP address, browser type, and the time of a request. These come with running a website and are used to keep it up and to catch abuse.
What is not collected
- Guests never make an account. Kept does not ask a guest for an email address, a phone number, or a date of birth.
- No advertising trackers, no analytics pixels, no data sold or handed to a broker.
- No card numbers. Kept cannot take payment on the site yet, so no payment details pass through it at all.
Where the data lives
Three companies hold data on Kept’s behalf, each under their own terms.
- Cloudflare Stream
- Every video. Upload, transcoding, storage, and playback all happen there.
- Supabase
- The database: host accounts, events, sticker codes, guest names, video records, kit orders.
- Vercel
- Hosting for the site itself, and the server logs described above.
These are servers in the United States. If that list changes, this page changes with it and the date at the top moves.
Who can watch a video
A print is a physical key. Whoever is holding it can scan the sticker on the back and play the message attached to it, with no login and no account.
- Anyone with your event code can open the gallery of messages for that event.
- If you set a password on your event, the gallery asks for it first. You choose whether that password covers the gallery alone or every print as well.
- A host can hide any single message from their dashboard, which takes it out of both places.
- People who run Kept can reach video records in the database while operating and supporting the service. Messages are not watched for any other reason, and they are never shown to anyone outside your event.
Hand this to your guests before they record: the video goes online, and anybody holding the print can play it.
Children
Videos recorded at a wedding or a birthday often include children. Kept has no way to know who is on camera and does not try to identify anyone.
The host is responsible for consent at their own event, including a parent’s consent before a child records or appears. If a parent later asks for a video to come down, the host can hide it, and either of you can write to hello@keptprint.com to have it deleted outright.
How long it is kept
One year of hosting is included with every event, counted from your event date. Hosting can be extended for as long as you want it. The videos are yours: download them and those copies are outside all of this.
Nothing is deleted without warning. Before an event is removed, the account holder gets an email at the address on the account, with time to download everything first.
Kit orders and account records are kept while the account is open, and for as long after as tax and accounting rules require.
Getting something deleted
Write to hello@keptprint.com and say what you want gone. You do not need an account to ask.
- A guest: name the event and the short code printed under the QR on your sticker. Your message is deleted.
- A host: ask for one message, a whole event, or your account and everything under it.
- A parent or anyone in a video: describe the event and the video. It comes down while it is being sorted out.
Requests are handled within 30 days. Deletion removes the video from Cloudflare Stream and the record from the database. Copies sitting inside routine database backups age out on the backup schedule.
You can also ask for a copy of what is stored about you, or for a correction to it, at the same address.
Changes to this page
Kept is new and the service is still being built out. When something here changes, the date at the top changes. If a change affects data already stored, account holders get an email about it before it takes effect.
Questions go to hello@keptprint.com.
Also worth reading: the terms and the common questions.