Your photo, briefly.

stripmem is a free web photo booth, operated from Thailand under the name stripmem. We are responsible for the personal information described on this page. You can reach us at stripmem@gmail.com.

• Your photo strip. Only the finished strip you choose to keep is uploaded, and we use it only to deliver it to you. The separate shots stay on the booth device.
• A small upload record. For each upload we keep a record without the photo: a random booth-session ID, when it was made, when it expires, when it was downloaded or deleted, its file type, size and dimensions, its status, and a scrambled (hashed) form of the download code. It is kept indefinitely for usage counts; it contains no photo, IP address or anything that identifies you.
• Network data to prevent abuse. To limit abuse we count requests per IP address. We store only a keyed hash of the address (IPv6 addresses are first shortened to their network part), never the address itself. These counters are normally deleted after about a day.
• Logs. Our own error logs are filtered to remove download codes, links and email addresses. Our hosting provider also keeps basic request logs (such as IP address, browser type and the page requested) for security and reliability, for a limited time under its own policies.
• Cookies and browser storage. Your cookie choice and a few small items the booth and download page need to work. The cookie policy lists each one.
• Analytics and advertising data, only if you accept those cookies. See the sections below.
• Emails you send us. If you email us, we receive your email address and message. We use them only to reply, keep them in our support inbox, and delete them when no longer needed.
• Administrator accounts. The people who run stripmem sign in with an email address and password or with Google. Guests never have accounts.

Where the law requires a legal basis (for example the GDPR in the EU and UK, or Thailand's Personal Data Protection Act, the PDPA), we rely on: providing the service you ask for (creating and delivering your strip); our legitimate interests in keeping the service secure, working and free of abuse (rate limits, logs, cookieless visit counts, replying to your emails); your consent (analytics and advertising cookies, which you can withdraw at any time); and legal obligations where they apply.

Download links close after 15 minutes, and the uploaded strip is permanently deleted within 48 hours, usually within minutes while the booth is in use. Delete now removes it immediately. Abuse-prevention counters are normally deleted after about a day. Upload records are kept indefinitely for usage counts; they contain no photo, IP address or anything that identifies you. Emails are kept until they are no longer needed. Your cookie choice lasts 6 months.

We do not give your photos to anyone, except that our storage provider holds them for us until they are deleted, and except where the law requires it. We use these service providers to run stripmem, and they handle data for us under their own terms:

• Vercel: website hosting and request logs.
• Cloudflare: photo storage and, if enabled, cookieless visit counting.
• Neon: database hosting.
• Google: Analytics and AdSense ads (only if enabled, and only with your consent), Google sign-in for administrators, and our email inbox.
• Resend: password-reset emails for administrators, if enabled.

We may also disclose information when the law requires it, or when needed to protect someone's safety or to defend our legal rights.

Our providers may process data in the United States and other countries, whose data protection laws may differ from those where you live. Where the law requires it, we rely on the safeguards these providers offer for such transfers, such as standard contractual clauses.

If analytics is turned on, we use Google Analytics, only with your consent, to count visits and a few actions (such as photos taken). It never receives your photos or download links. Until you accept, the Google tag is not loaded at all, so nothing is sent to Google. We may also count total visits with Cloudflare Web Analytics, which uses no cookies. You can change your choice any time with Cookie settings in the footer. Read the cookie policy

If ads are turned on, Google AdSense shows them, and only after you accept Advertising cookies. All our ads are non-personalized: we ask Google not to choose them based on your browsing history. Google may still use cookies for things like limiting how often you see an ad and detecting fraud. You can withdraw consent any time with Cookie settings, and we treat a Global Privacy Control signal as a refusal of Advertising cookies. We do not sell or share your personal information.

How Google uses information from sites that use its services · Google Ads Settings

We do not use facial recognition and we do not collect or store biometric identifiers or face templates. Photos are only combined into a strip and deleted.

Wherever you live, you can ask us what personal information we hold about you, ask for a copy, ask us to correct or delete it, and object to or opt out of its use. Some laws give these rights explicitly, such as the GDPR in the EU and UK, Thailand's PDPA and the CCPA/CPRA in California, but we honor these requests for everyone. Uploaded strips can be deleted right away with Delete now, and they are permanently deleted within 48 hours anyway. Because guests have no accounts, we usually hold nothing else we can link to you. To make a request, contact stripmem@gmail.com. We may ask for details to find or verify the information. We will respond within 30 days, and we will not treat you differently for using your rights. You can also complain to your local data protection authority, or in Thailand to the Personal Data Protection Committee (PDPC).

stripmem is a general-audience service. It is not directed to children under 13, and accounts (which only our administrators use) require users to be 13 or older.

We do not knowingly collect personal information from children under 13. We do not ask guests for a name, email or account. A photo taken at a booth is held only to deliver the strip to the person who took it: the link closes after 15 minutes and the uploaded copy is permanently deleted within 48 hours. It is not linked to any identity and is never used for profiling, advertising or training. All ads are non-personalized.

Whoever runs a booth at an event where children are present is responsible for obtaining any parental permission that is needed before children use it. Before starting, every guest is asked to confirm they are 13 or older, unless the device was set to not ask again, in which case the person operating the booth is responsible for who uses it. Children under 13 are not allowed to start the booth. The answer is stored only on the device and is never sent to us.

Parents and guardians can contact stripmem@gmail.com to ask us to delete a child's photo or any other information. Include the time and place of the booth if you can. If we learn that we hold personal information from a child under 13 in an account, we will delete it.

We use reasonable measures to protect information: encrypted connections, private storage, download links that expire, and download codes stored only in hashed form. No service can be completely secure, so we cannot guarantee that information will never be lost or accessed without permission.

We may update this policy, for example when the service changes. The date below shows the latest version. If a change is significant, we will make it clear on this page.