Privacy Notice
Last updated: 1 October 2026 · Effective: 1 October 2026
PairBooth is designed around data minimisation: no account, no public gallery, no microphone and no continuous video upload. Only photos you deliberately capture are sent to create the shared booth experience.
1. Who is responsible
PairBooth is the controller of personal data processed through pairbooth.com. The service is operated from Belgium. Privacy, deletion and data-rights requests can be sent to [email protected]. The operator’s full legal identity and postal address are published in the Legal Notice once supplied.
2. Scope
This notice covers pairbooth.com, temporary booth sessions and related support communications. It does not cover copies downloaded to a participant’s device, websites where a participant later shares a strip, or third-party services linked from this site.
3. Data we process
| Data | How and why it is used |
|---|---|
| Captured photos | Up to eight JPEG images per round, used to show both participants’ poses and generate the requested photo strip. |
| Booth data | Random room identifier, six-character code, random host/guest credentials, round number, progress, expiry and closed status. |
| Device storage | A random device token in local storage and an active booth session in session storage, used to reconnect the same browser. |
| Optional analytics data | If you accept analytics, Google Analytics receives information such as visited pages, approximate location derived from IP address, device/browser details, referring page and interaction information. PairBooth does not intentionally send photos, camera content, booth codes, invitation tokens or captions to Analytics. |
| Technical data | IP address, browser/device information, request time, route, security events and error logs that may be generated by the hosting and security infrastructure. |
| Support data | Your email address and anything you choose to include when contacting [email protected]. |
4. What we do not intentionally collect
- No audio or microphone recording.
- No continuous webcam stream is sent to PairBooth; the live preview stays on your device until you press the capture button.
- No public profile, password, contact list or precise location.
- No advertising identifiers or intentional cross-site tracking.
- No facial recognition, identity matching, biometric templates or AI model training using booth photos.
A photograph is personal data when a person can be identified from it. PairBooth does not technically analyse faces to identify people.
5. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Create and operate the requested booth | Performance of the service requested by each participant and steps taken at their request. |
| Record and manage cookie choices through Cookiebot | Compliance with legal obligations and legitimate interests in documenting privacy choices. |
| Measure site visits and improve PairBooth through Google Analytics | Your consent. Analytics remains disabled unless you accept “Statistics” cookies in Cookiebot, and you may later withdraw that choice. |
| Protect rooms, investigate errors and prevent abuse | Legitimate interests in service security, reliability and protecting users, balanced against user rights. |
| Comply with valid legal obligations | Compliance with applicable law. |
| Respond to support or rights requests | Performance of the request, legitimate interests and legal obligations as applicable. |
Browser camera permission is controlled by your browser and can be revoked in browser settings. It is separate from the legal bases described above.
6. Permission and image rights
Each participant must knowingly agree to be photographed and to have each captured image temporarily processed in the shared booth. Permission to take and process a photograph is separate from permission to publish, post, sell or otherwise reuse it. Before sharing a downloaded strip outside PairBooth, obtain the separate permission of every identifiable person shown.
7. Visibility of photos
Captured photos are available only to devices holding valid credentials for that temporary booth and to service providers that host or secure the application. PairBooth does not offer a public gallery. A participant can still download, screenshot or independently share a strip; PairBooth cannot control copies that have left the service.
8. Retention and deletion
- Booth access expires 24 hours after creation or the most recent completed restart.
- Selecting “End booth & delete photos” closes the booth and requests deletion of its stored images.
- Starting a new round removes the previous round’s photos.
- Expired or closed booth records and objects are removed by the service’s cleanup process. Short-lived infrastructure logs and backups may persist for a limited period for security, continuity or legal compliance.
- Downloaded copies remain on participants’ devices until those participants delete them.
For a deletion request, email [email protected] with the approximate booth time and non-sensitive details. Never send the booth token or intimate imagery in ordinary email.
9. Service providers and transfers
PairBooth relies on infrastructure supplied through OpenAI’s Sites environment and Cloudflare services for hosting, database, object storage, networking, TLS and abuse protection. Usercentrics A/S provides Cookiebot consent management. If you accept statistics cookies, Google Ireland Limited provides Google Analytics. These providers process limited data on PairBooth’s behalf or as independent controllers for their own security and account operations. Processing may involve countries outside the European Economic Area, including the United States. Where required, transfers must use an adequacy decision, Standard Contractual Clauses or another lawful safeguard.
10. Security
Measures include HTTPS, random room and participant credentials, short-lived join codes, separation between booths, file-type and size checks, limited retention and deletion controls. Codes and invitation links function as secrets and should be sent only to the intended participant. No online system is completely secure; report suspected unauthorised access immediately to [email protected].
11. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where consent is the legal basis. Because PairBooth does not require accounts and uses pseudonymous room credentials, we may need limited information to locate a booth and verify that a request is legitimate. We will not retain additional identity information merely to identify users.
You may complain to the Belgian Data Protection Authority at dataprotectionauthority.be or the supervisory authority where you live or work.
12. Children
PairBooth is for users aged 16 or older. Do not capture or upload images of children. If you believe a child’s image has been submitted, contact [email protected] immediately so it can be investigated and removed.
13. Automated decisions, sale and advertising
PairBooth does not make decisions producing legal or similarly significant effects, does not sell booth photos or personal data, and does not use booth photos for personalised advertising.
14. Changes
Material changes will be reflected by a new effective date and, where appropriate, a prominent notice. The version in force when you use the service applies to that use.
Questions, rights requests or safety reports?
Email [email protected]. Please do not attach intimate or highly sensitive images to an initial report.