Storage Policy

When an attendee opens a campaign link and adds a photo (or records a short video), the personalization happens in their own browser. The final stamped image or clip is generated on their device and handed straight back to them to download and share.

We do not retain the attendee's original photo or video. Nothing about the attendee's face or likeness is archived for later use or used to train anything.

So that an attendee can share a link to their finished stamp, the generated image or video may be hosted on a temporary public URL. This copy is automatically deleted within one hour of being created — after that the link stops working and the file is gone. We never keep finished stamps beyond that short sharing window.

• Organizer content — the base template designs, fonts, colors and text you upload when building a campaign. This is yours and needed to render the experience.
• Campaign settings — names, dates, visibility, and similar configuration.
• Aggregate, non-identifying counts — how many stamps were generated or shared, so organizers get analytics. These are numbers, not media.

If a feature ever requires server-side processing (for example, rendering a branded video), the attendee's media is used only for the moment it takes to produce the result and is discarded immediately afterward. It is never added to a long-term store, used to train anything, or shared with third parties.

Because attendee media isn't stored by Stampd, organizers cannot retrieve an attendee's photo after the fact. If you need to collect submissions, use a separate, consented process and tell attendees clearly.

If anything here is unclear, reach us at our contact page and we'll walk you through exactly how data flows in Stampd.