This is a draft and has not been reviewed by a lawyer yet.
Ten Shots is a shared disposable camera. Friends shoot together at an event and see the photos when the roll develops. We hold private party photos of people who never signed up for anything, so we collect as little as we can and keep every roll private to the people on it.
Who we are
Ten Shots is made by Boring Studio S.R.L., registered in Romania under trade register number J12/5406/2023, unique registration code (CUI) 49276611, at Str. Eugen Ionesco nr. 67, bl. F, ap. 42, Cluj-Napoca, the data controller for the app, the App Clip and this website. Write to us at support@tenshots.cam about anything on this page.
What we collect
- A display nameFrom everyone who joins an event, so friends see who took which shot.
- Your shots, the time you took them and the event they belong toFrom everyone who shoots, to build the roll and show it when it develops.
- Your Apple or Google account identifier and the email it sharesFrom people who sign in (hosts, and guests who keep their rolls), to keep your events and rolls across devices.
- A device push tokenFrom people who allow notifications, to tell you when the night starts and when the roll develops.
- Purchase records (what you bought for which event, never card details)From hosts and co-hosts who buy guest capacity, to give you the room you paid for and handle refunds.
- What you write to usFrom anyone who uses the contact form or emails us, to answer you.
- Usage events (pages viewed, buttons tapped, which link brought you)From visitors and app users who agree to analytics where consent is required, to see what works and fix what does not.
We do not upload your contacts, we do not use location (location data is stripped from every shot), and we do not run face recognition. Payments go through Apple; we never see your card.
Legal basis
- Contract: your account, the events you host or join, your shots and purchases. We cannot run the camera without them.
- Consent: notifications, and analytics where the law asks for consent. You can withdraw it in iOS Settings or the app at any time.
- Legitimate interest: keeping the service safe, preventing abuse, and reviewing reports of content that breaks our terms.
Who sees your shots
- Before the roll develops, you see your own shots. The host and co-hosts see every shot so they can remove anything that should not be there.
- After it develops, everyone on that event sees the whole roll. The host can choose that only they see it.
- Rolls are never public. There is no gallery, no search and nothing indexed. The invite page on this website shows only the event cover, name, date, the host's first name and how many friends are in, never a photo from the roll.
- People on a roll can save shots to their own phone or share them. Once saved, a copy is out of our hands.
Who processes data for us
We use a few providers to run Ten Shots. Each one only gets what it needs for its job.
- Supabase: database, sign-in and photo storage, hosted in the EU (Frankfurt).
- Cloudflare: this website and the invite pages.
- Apple: Sign in with Apple, push notifications and in-app purchases.
- Google: Sign in with Google, if you choose it.
- Resend: delivers the email from our contact form and the emails we send you.
- An analytics provider, named here before the app launches.
Where a provider handles data outside the European Economic Area, it does so under the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
- Shots and rolls stay until the host deletes the event or the person who took them deletes their account.
- Guests who never sign in keep their identity on their phone only. Deleting the app or the App Clip's data loses it for good.
- When something is deleted it is gone from our systems within 30 days, once backups age out.
- Messages to support are kept for up to two years, then deleted.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to limit it. You can delete your account in the app (Settings, Delete account). Deleting your account also deletes the events you host, for everyone on them. For a copy of your data, write to support@tenshots.cam; we answer within a month.
If a shot of you is on someone's roll and you want it gone, ask the host, or tell us from the support page and we will deal with it. You can also complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro) or the authority where you live.
Age
Ten Shots is for people 16 and over. If you think someone younger is using it, tell us and we will remove their data.
Changes
When this page changes we update the date at the top. If a change matters for how we use your data, we tell you in the app first.