Privacy
Last updated June 2026
or it didn't happen lets an event host collect photos from their guests directly into the host's own cloud storage. The core idea is simple: we never store your photos. They go straight from a guest's device into the host's Google Drive or Dropbox.
What we store
We keep only the small amount of data needed to make an event work, in a Cloudflare D1 database:
- The event title and the optional email address a host provides.
- An admin token and per-guest session tokens (random strings) used to authorize access.
- Guest usernames — either chosen, or auto-generated (e.g. "quiet-otter").
- For each uploaded photo: its filename, type, size, and a reference to where it lives in the host's cloud — never the photo itself.
Your cloud connection
When a host connects Google Drive or Dropbox, we request the narrowest possible permission — the Google drive.file scope, or Dropbox's file-write scope. This lets us upload into a single folder we create for the event and nothing else; we cannot see the rest of the host's drive. The access and refresh tokens this produces are encrypted (AES-256-GCM) before being stored and are used only to upload guests' photos and show thumbnails.
No accounts, no tracking
There are no user accounts and no passwords. A guest's username and session are kept in their browser's localStorage so they're recognized when they return to the same event. We don't use advertising or third-party analytics trackers.
If a host provides an email address, we send them their admin link once via Cloudflare's email service. The email is optional — the link is always shown on screen too.
Push notifications
If you opt in to new-photo notifications for an event, your browser gives us a push subscription — an endpoint URL provided by your browser's push service (e.g. Google or Mozilla) plus two keys used to encrypt messages to your device. We store these only to notify you when photos are added to that event, and you can turn them off at any time, which deletes the subscription. We never see your identity from a push subscription.
Deleting data
Photos live in the host's own cloud, so the host controls them directly there. To have an event's metadata (the records described above) removed from our database, contact feedback@oritdidnthappen.pics.
Contact
Questions about privacy? Email feedback@oritdidnthappen.pics.