Terms of Use

1. Provider and scope

SnapKey is provided by Bernd Bogenrieder, Am Horben 5, 88437 Sulmingen, Germany (“SnapKey”, “we” or “us”). These Terms govern the creation and use of photo spaces, Master and Guest QR codes, cloud-storage connections and protected sharing links.

Before creating a photo space or uploading content, you must actively agree to these Terms. The Privacy Policy is provided separately for information and is not included as a blanket data-protection consent.

A standardized Data Processing Agreement is available free of charge in the protected Master dashboard. The Host must truthfully classify the photo space as private or organizational use. Organizational guest access and public sharing remain technically locked until the current DPA has been concluded. Exclusively personal or household use does not require a DPA.

2. Service and availability

SnapKey lets a host create a private photo space, invite guests to upload images and store those images in a cloud account selected and connected by the host. Hosts can manage permissions, deactivate Guest QR codes and create password-protected sharing links.

Photo spaces using a personal Google Drive or Dropbox account are currently free of charge. Managed Cloudflare R2 storage costs €5.00 per selected storage unit as a one-time payment for the package and retention period shown before checkout. There is no subscription.

Payment is processed by PayPal. The final total is shown before approval, and a managed-storage project is created only after PayPal confirms the payment. Statutory consumer rights, including any applicable withdrawal or refund rights, remain unaffected.

There is no entitlement to uninterrupted availability, permanent storage or a particular feature set. Planned maintenance, provider outages, API restrictions and security measures may temporarily limit the service.

3. Host responsibilities

The person creating a photo space (“Host”) is responsible for:

• protecting the Master QR, Master password and protected sharing passwords;
• truthfully selecting and maintaining the applicable private or organizational use classification;
• choosing appropriate guest permissions and deactivating access when it is no longer needed;
• informing guests and depicted persons about the intended collection and sharing of images;
• obtaining any consent or other legal basis required for photographing, uploading, storing and sharing people;
• managing files, storage capacity and access rights in the connected cloud account; and
• ensuring that use of Google Drive or Dropbox complies with that provider’s terms.

Anyone who receives a valid Master or Guest link may be able to use its permitted functions. QR codes and passwords must therefore be shared only with intended recipients.

4. Guest uploads and content rights

You retain ownership of content you upload. You grant SnapKey only the limited, non-exclusive permission necessary to receive, transmit, display, download, share at your direction and delete that content as part of operating the service.

You may upload only content that you are legally permitted to use. In particular, content must not infringe copyright, image rights, privacy, confidentiality or other third-party rights.

5. Prohibited use

You must not use SnapKey to:

• upload unlawful, abusive, discriminatory, threatening, sexually exploitative or otherwise harmful content;
• upload malware or interfere with the service, its security or other users;
• gain unauthorized access to photo spaces, cloud accounts or administrative functions;
• automatically scrape, overload or circumvent limits and access controls; or
• use another person’s cloud account or personal data without authorization.

We may block links, restrict functions or remove service metadata where reasonably necessary to address abuse, security risks or legal obligations.

6. Cloud providers and third-party services

Personal customer storage is supplied through Google Drive or Dropbox. Microsoft OneDrive is planned but not available. Organizations should use an account and contract with the selected provider that provide the required processing terms. The connected provider’s own terms, privacy rules, capacity limits and availability apply.

SnapKey managed storage uses a private Cloudflare R2 bucket configured for EU jurisdiction. Its package capacity, active retention period and deletion grace period are shown before creation. Guest and public sharing access ends after the active period; the Master can export photos during the grace period; photos are then automatically deleted.

If managed storage is selected, each paid unit equals the storage chunk displayed during checkout. The booked package defines the project’s maximum capacity. The estimate of possible photos is informational and depends on actual file sizes. Uploads stop when the booked byte capacity is reached.

SnapKey is not responsible for changes, interruptions, data loss or account restrictions caused by a third-party cloud provider. Hosts should keep backups appropriate to the importance of their images.

7. Sharing and deletion

Guests cannot browse other guests’ uploads by default. A Host may expressly select photos for sharing and create a password-protected link. Anyone who receives both the link and password may be able to view or download the selected photos.

When an authorized guest deletes an eligible upload through SnapKey, the service requests deletion from the connected cloud provider and removes the associated SnapKey metadata. Provider-side recovery, backup or retention rules may still apply.

8. Warranty and liability

The statutory warranty and liability rules apply. For ordinary negligence, we are liable only for breach of a material contractual obligation and only for foreseeable, typical damage. These limitations do not apply to intent, gross negligence, injury to life, body or health, fraudulent concealment, guarantees or mandatory statutory liability.

You remain responsible for maintaining suitable copies of important content and for verifying that uploads have reached the connected cloud account.

9. Changes and termination

We may update the service and these Terms for legal, security or functional reasons. Material changes will be indicated on the service where reasonably possible. Continued use after the effective date constitutes acceptance where permitted by law.

A Host may stop using SnapKey at any time, deactivate the Guest QR and disconnect the cloud account. Requests concerning deletion of SnapKey metadata can be submitted through the contact form.

10. Governing law

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. Mandatory consumer-protection rules of the country in which a consumer habitually resides remain unaffected. Statutory rules determine the competent courts.

11. Contact

Questions or problem reports can be sent through the contact form. Provider details are available in the Impressum.