Terms of Service

These Terms of Service are the agreement between you and Joshua Rodriguez as Galashare ("GalaShare", "we" or "us"), who operates the event photo and video sharing service at https://galashare.com (the "Service"). They apply to everyone who uses it: hosts who create events, people who pay for Premium, and guests who upload to an event.

By signing in, buying Premium or uploading through an event page, you accept these terms. If you don't accept them, please don't use the Service. They work together with our Privacy Policy, Refund Policy and Purchase Terms. Nothing in any of them takes away rights that the law gives you and that cannot be waived; where a clause would do that, the legal right wins.

1. Who can use GalaShare

To be a host or to buy Premium you must be an adult where you live and able to make a binding agreement. If you sign up for a business, a venue or another person, you confirm that you are allowed to do that.

Guests need no account. The Service is not aimed at children under 16, and a guest under 16 may upload only with a parent's or guardian's permission, or by handing the content to an adult who uploads it for them. Hosts should keep this in mind when they share an event link.

2. Accounts, event links and QR codes

Hosts sign in with a link we send to their email address. There is no password, so whoever can open that email can open your account. Keep your mailbox secure, don't forward sign-in links, tell us quickly if you suspect someone else got in, and give us accurate information when you set up an event.

Each event has a guest page and a QR code that leads to it. Neither is password protected, and either can be forwarded, photographed or posted by whoever receives it. Share them only with people you want contributing. Guests don't sign in; a random identifier kept in their browser ties their uploads and notes together on that device, and it is not a check of who they are.

The host decides how an event behaves, using switches in the dashboard:

• Uploads can be turned on or off at any time.
• The shared guest gallery is off until the host turns it on. When it is on, anyone with the event link can see the visible uploads (not hidden or awaiting approval) together with the uploader names.
• Moderation can require the host to approve each upload before it appears anywhere other than the uploader's own list and your dashboard.
• The guestbook can be turned on or off. Guestbook notes are readable only by the host.

The live slideshow has its own link, which works for anyone who holds it and does not ask them to sign in. Treat it like a key. The link cannot currently be reset, and it stops working once the event's files are deleted. Nothing we do can recall a file that someone has already downloaded or saved.

3. Free trial and Premium

Every event starts on the free trial. A host can upgrade that single event to Premium with one payment. These are the limits of each:

• Size is measured in binary units. One GB is 1,073,741,824 bytes and one MB is 1,048,576 bytes.
• A single photo can be at most 50 MB and a single video at most 2.0 GB. A file also has to fit in the event's remaining storage, so on the free trial the largest possible file is 1.0 GB.
• The number of guests is not capped. Everything they upload shares the one file count and storage total for the event.
• Uploads still being sent count against both totals. Deleting a file frees its space again.
• We never bill for going over. When an event reaches a limit, further uploads are simply refused until space is freed or the event is upgraded.

Premium belongs to the one event it is bought for and begins when we receive confirmation of payment. Its 365 days are counted from that moment and do not include any trial days you had left. If the trial had already ended but the event's files are still there, buying Premium reopens uploads automatically. The trial is for trying the Service, not for permanent storage.

GalaShare does not sell credits, tokens or subscriptions. Each purchase is a one-time Premium upgrade for one event, with no renewal and no automatic charge afterwards.

4. Fees and payment

Premium is currently advertised at €39 for one event. The price and currency shown on the checkout page just before you pay are what you are charged. We do not currently add tax at checkout, so unless the page shows a separate tax line, the price shown is the full amount you pay. Payments are handled by Stripe, and your own bank or card issuer may add currency conversion or other charges that we do not control.

Use only a payment method you are entitled to use. Some methods, such as bank debits, take days to clear. Premium switches on once the payment clears, and until then you can't start a second purchase for the same event. If a delayed payment clears after the event's files were already deleted, we cannot apply it, and we will refund it instead.

We may change our prices and plans in the future. A change affects later purchases only; it does not alter what you have already bought. More detail is in our Purchase Terms.

5. Downloads, expiry and deletion

The life of an event follows its plan:

1. While the event is active, uploads, the gallery tools and downloads are available. Uploads and guestbook notes close the moment the active period ends.
2. During the download window that follows, the host can still moderate and download everything. Treat this time as your chance to save what you want to keep.
3. When the window ends, an automatic daily process permanently deletes the event's photos, videos, thumbnails, cover image, upload records and guestbook notes. This cannot be undone.

We do not promise to email you before any of these dates. We may send reminders when that becomes available, but please don't rely on them. The dashboard shows the date uploads close and the date your files are deleted, so note both and download in good time.

Links used to view or download files only work for a few hours (currently six). When one expires, ask for a new one from the dashboard. GalaShare is not a backup or archive; keep your own copies of anything important.

Deleting earlier is possible: the host can delete uploads, notes or the whole event at any time, and we also remove content when these terms or the law require it. If we delete an event automatically, a basic event record (the names, date, welcome message and settings the host entered) stays on file; if the host deletes the event, that record is deleted too. Our payment records stay in both cases. The Privacy Policy explains what we keep and why.

6. Refunds

You can have a full refund, for any reason, at any point in the first 7 days after buying Premium, whether or not you have used the Service. Write to contact@galashare.com from your account email. A refund ends the Premium upgrade, so the event returns to the trial limits; download what you need first. The details are in the Refund Policy. Any cancellation or refund rights that the law gives you in your country stay in place in addition to this.

7. Your content

What you upload stays yours. Uploading does not hand ownership to GalaShare, and it does not hand the uploader's copyright to the host either. You promise that you created the content or are allowed to share it, and that you have the consent that the people shown in it, or their parents, need to give.

To run the Service for you, you give us a free, worldwide, non-exclusive licence to store your content, copy it between our systems, resize it into previews, show it according to the event's sharing settings, and deliver it as downloads. Our providers may do these things on our behalf. The licence is for operating the Service and nothing more.

The licence stops once the content is deleted, except for the short time needed to finish the deletion or follow the law. A copy that a person has legitimately downloaded stays theirs, under whatever rights apply to it.

We do not sell your content, we do not use it in advertising unless the rights holders separately agree, and we do not train AI models on it.

8. What hosts and guests are responsible for

When a guest uploads to an event, the guest allows the host to view, download and keep that content for personal purposes linked to the event, and allows it to be shown to others if the host switches on the shared gallery or shares the slideshow. Posting it publicly, for example on social media, needs the uploader's permission, plus any consent needed from the people in the picture.

Hosts choose the sharing settings and are responsible for telling their guests what those are. Guests decide for themselves what to upload. Please be aware that files are stored exactly as sent, so a photo may carry hidden camera data, including the place it was taken, and that data goes with the original wherever it is shared.

A guest can delete their own uploads, but only from the same browser they uploaded with. A guest who cleared that browser's data, or who changed device, can ask the host, or write to us at compliance@galashare.com.

9. Acceptable use

You may not use GalaShare to:

• upload anything illegal, including sexual content involving minors and intimate images shared without consent;
• infringe copyright, privacy, publicity or other rights, or expose someone's private details without a lawful reason;
• harass, threaten, deceive or impersonate anyone;
• use an event name, page title or web address that impersonates someone else or is offensive;
• spread malware or spam, probe or attack the Service, or reach accounts and files that aren't yours;
• get around limits, payment or security measures, treat the Service as general-purpose bulk storage, or resell access to it.

We don't check uploads before they appear, so tell us if something is wrong. A report should say which event and file you mean and why it is a problem; send it to compliance@galashare.com. We may ask for more information. We can hide or delete content, or restrict an event or account, when that is reasonably needed to deal with a breach, infringement, safety or security concern, or legal duty.

10. Copyright complaints

We respond to claims of copyright infringement under the U.S. Digital Millennium Copyright Act. Send copyright notices to compliance@galashare.com. A notice should be in writing and include:

1. The signature, physical or electronic, of the copyright owner or of the person acting for the owner.
2. A description of the work you say was copied.
3. Where the material sits on GalaShare, with enough detail for us to find it, such as the event address and the file in question.
4. Your name, postal address, telephone number and email address.
5. A sentence saying you sincerely believe that neither the owner, nor anyone acting for the owner, nor the law permitted this use.
6. A sentence saying, under penalty of perjury, that everything in the notice is correct and that you own the right concerned or are authorised to act for the owner.

We may remove or disable the material and tell the host of the event. If you uploaded it, or you are the host, and think the removal was a mistake, you can send us a counter-notice with your signature, a description of the removed material and where it was, a statement under penalty of perjury that you believe it was removed by mistake or misidentification, your contact details, and your consent to the jurisdiction of the federal court for your district (or, outside the United States, of a court where we are located). Unless the complainant tells us they have started a court action, we may restore the material about ten to fourteen business days after receiving a valid counter-notice.

We close the accounts of hosts who repeatedly infringe, and we may close or delete an event that keeps being used for infringement. Guests are anonymous, so we act on the event rather than on the guest.

11. Our intellectual property and your feedback

The Service itself, meaning the software, design, text, logos and brand, belongs to us and our licensors, and is protected by United States and foreign law. You may use it as intended, including sharing your event link and QR code. You may not copy it, sell it or use our name or branding without written permission, unless the law lets you.

If you send us ideas or suggestions, we may use them freely and without payment. You give us a perpetual, irrevocable, worldwide, royalty-free licence to do so.

12. Other companies we use

GalaShare relies on outside providers: Stripe for payments, Cloudflare for hosting the site, storing media and checking the contact form for bots, and Supabase for the database and sign-in. Sign-in emails are delivered through an email provider that Supabase connects to. Your dealings with them are also covered by their own terms. We are not responsible for other websites that we link to. Using a provider does not remove any duty we owe you under the law or these terms.

13. Privacy and deletion requests

The Privacy Policy explains what personal information we handle, who receives it, and how to use your privacy rights. Hosts can delete individual uploads, guestbook notes and whole events from the dashboard at any moment, and that deletion is immediate.

GalaShare has no self-service account deletion or full data export yet. To close an account, or to ask for access, correction or removal of anything that you can't remove yourself, write to compliance@galashare.com. We reply within the time the law sets. Content already removed from our live systems may remain briefly in our providers' recovery copies until those are cycled out, and we keep only the records the law or our accounts require.

14. Digital Assets and Proprietary Processes

GalaShare has three core features. For each, this section lists the digital assets involved and explains, in plain terms, why we need them, how they are protected, and who can delete them. In every case your data is protected in transit by HTTPS, and our storage and database providers encrypt it at rest. Whatever you pay, you pay for the tools and the service; you never pay for ownership of anyone's content. None of this content is listed or searchable, but anyone holding an event, gallery or slideshow link can view it and, with a little technical skill, download the original files.

Feature 1: Guest uploads by QR code

Each event gets a guest page and a QR code. Guests scan it, with no app and no account, add an optional name, and upload photos and videos or write guestbook notes.

Event page, link and QR code. This is the web address of the event, showing its names, date, welcome message, cover photo and theme, together with the QR code we generate for it. It exists so guests can contribute with nothing to install. The page is served over HTTPS and asks search engines not to list it, but anyone who has the link can open it. The host owns what is on the page and can edit it or delete the event whenever they like.

Stored photos and videos. These are the original files guests send, unchanged, plus a small thumbnail and a larger preview that the guest's browser creates; we keep the originals so hosts get full-quality copies, and the previews so galleries load fast. They are kept in Cloudflare R2 storage in the U.S. jurisdiction, encrypted at rest, with no public addresses; they move only through short-lived signed links (one hour to upload, six hours to view or download). The uploader owns their files. The host can delete any of them at any time, a guest can delete their own from the same browser, and we remove anything else on request.

Upload and guestbook records. For each file we keep a database record with its name, type, size, dimensions, status and the optional name the guest typed, and each guestbook note is saved with its text and name. We need them to build the gallery, count the quota, moderate and let the host read notes. They are held at Supabase in AWS us-east-1 (Northern Virginia, USA), encrypted at rest and covered by row-level security, so a host's account can read only its own events; guests never touch the database directly, because every request is checked by our servers. These records belong to the host, who can delete them and the notes at any time (guests can delete their own uploads from the same browser, and notes by asking us); everything goes when the event is deleted.

Guest browser identifier. This is a random code that a guest's browser makes and keeps in its local storage, next to the optional name. We store only a salted one-way hash of it, which lets us show a guest their own uploads, let them delete those, and apply per-guest limits against abuse. The code is sent over HTTPS and it does not identify the person. The code is the guest's own: clearing the browser's site data erases it from the device (after which the guest can't delete earlier uploads themselves), and the hash disappears from our records when the uploads and notes it points to are deleted, and from the short-lived abuse-protection counters within 3 days.

Feature 2: Host gallery tools

The host sees everything in a private dashboard: they can hide, show, approve or delete uploads, run a live slideshow, optionally open a shared gallery to guests, download it all as one ZIP (very large galleries may arrive as several ZIP parts in some browsers), and export the guestbook.

Gallery and moderation records. Each upload carries a status (visible, hidden or awaiting approval), and each event has switches for uploads, the shared gallery (off by default), approval and the guestbook. They let the host decide exactly what appears and to whom. Only the signed-in host can change them, and hidden or unapproved items are never returned to other guests. The host owns these choices and can delete the files, notes and event at any time; a fee for Premium pays for the capacity and tools, not for any claim on the content.

Slideshow link. The slideshow is a page, opened with a link containing a long random code, that shows the 200 most recent visible uploads and their uploader names for display on a screen. It travels over HTTPS, and the code is hard to guess; even so, anyone who holds the link can open it, it can't currently be reset, and it only shows visible items. It stops working when the event is deleted, whether by the host or by our automatic process, and the content it shows remains the property of the people who uploaded it.

ZIP download and guestbook export. This lets the host keep full-quality copies of everything: when they press download, their browser asks us for time-limited links to each original file, and a small helper in the browser streams the files from storage straight into a ZIP on the host's own device, so our servers never relay the files and we keep no copy of the archive. The links are issued only to the signed-in host, are sent over HTTPS and expire after a few hours. The guestbook export is a text file the browser builds from the notes. Everything downloaded is the host's to keep, and what is deleted from GalaShare is not affected by what the host has saved.

Feature 3: Free trial and one-time Premium upgrade

Every event begins free. The host can pay once, through Stripe, to raise that event's limits and extend its dates.

Plan and usage records. These are the fields on the event that say which plan it has, how many files and bytes it may use and has used, and when uploads close and downloads end. We need them to apply the limits fairly, count in-progress uploads and run the clock. Hosts can read them but cannot change them, because only our servers set plans, and the database encrypts them at rest. Deleting the event removes them; after automatic deletion a small event record stays, and you may ask us to remove it.

Order records. For each purchase we keep the amount, currency, status, Stripe payment reference and dates, plus the payment notifications that Stripe sends us. We use them to apply Premium to the right event, to bill correctly and to process refunds and keep our books. Stripe's notifications are signature-checked, the records are encrypted at rest, and the host can ask us for a copy of their order records at contact@galashare.com. The upgrade fee pays for the Premium service, not for ownership of content; the records are kept as long as accounting, tax and legal duties require, generally up to 7 years, and you can ask us to correct or erase anything we are not required to retain.

Stripe Checkout payment. To take your one-time payment without ever handling card data, you are sent to a payment page hosted by Stripe when you press upgrade, and we tell Stripe your account email, the event reference and a description with the event name. You type payment details only on Stripe's page, so we never see or store your card number, and Stripe protects it under its own security standards. Your payment buys Premium for that one event; it does not give us any right in your content. Stripe keeps its own payment records, which you can ask Stripe or us about.

Scheduled retention process. Once a day an automated job closes uploads at the end of the active period, deletes an event's files, upload records and guestbook notes when its download window ends, removes uploads that were started but never finished, and clears short-lived technical records. We need it so that your data is not kept longer than the plan promises. It starts only when our scheduler calls it with a secret key, it does not depend on reminder emails, and its deletions are permanent. Your content remains yours throughout, and you can always delete it sooner.

15. Security

We use reasonable technical and organisational measures. Data travels over HTTPS, our storage and database providers encrypt it at rest, access to the database is limited by row-level security, and files are reached through time-limited signed links rather than open addresses. No system is perfectly safe, and we cannot promise otherwise.

As far as the law allows, we are not responsible for harm caused by things outside our reasonable control, such as an attack on an outside provider, a compromised email account or device, or event links and QR codes that were passed on. If the law requires us to tell you and the authorities about a breach, we will.

16. Availability, suspension and discontinuation

We work to keep GalaShare running, but maintenance, network faults and provider outages can interrupt it, and we cannot promise it will be uninterrupted, error-free or able to recover every file. This does not reduce any standard that the law requires of us.

We may suspend access when it is reasonably needed for abuse, chargebacks or payment disputes, a security risk or a legal duty. We will warn you and let you fix the problem where we reasonably can, but serious or unlawful content may need action straight away. If we stop offering the Service while you are still within a paid period and you did nothing wrong, we will, where practical, warn you in advance and give you 30 days to download your files. Your legal remedies are unaffected.

17. Events beyond our control

We are not liable for a delay or failure caused by something we could not reasonably prevent, such as a natural disaster, fire, epidemic, war, unrest, strike, government order, power or internet failure, or an outage of a hosting, storage or payment provider. Our duties are paused while it lasts, and we will try to restart the Service as soon as we can. Any refund or remedy the law gives you remains available.

18. Ending your use

You may stop using GalaShare whenever you want. You can delete your events from the dashboard and write to compliance@galashare.com to have your account closed. We may suspend or end an account if you break these terms or when section 16 allows it, and we will give notice where we reasonably can. When access ends, your right to use the Service ends too, and your content is deleted as described in sections 5 and 13, so save your files first.

19. Indemnity

As far as the law allows, you agree to cover us, and anyone working for us, against claims, losses and reasonable legal costs that arise from content you upload or share, how you configure or use sharing, posts or other uses of content outside the Service, your breach of these terms, or your violation of anyone's rights (including the copyright, privacy or image rights of people shown in your content). We will tell you about such a claim and may take charge of defending it, and you will help. It leaves out anything resulting from our own fraud or wilful wrongdoing, and it does not apply where consumer law forbids it.

20. Disclaimers and limits on liability

The Service is provided "as is" and "as available". We don't give any warranty beyond those these terms state, and we disclaim every implied one, including fitness for a particular purpose and non-infringement, as far as the law allows. We also don't promise the Service will meet your needs or keep working without interruption.

Our total liability to you for claims connected to an event is limited to what you paid us for that event (nothing, for a free trial event). We are not liable for indirect or consequential losses, such as lost profits. These limits do not cover fraud, wilful misconduct, serious negligence, or anything the law will not let us exclude. Some places do not allow certain limits, in which case the limit applies only as far as it is lawful.

21. Governing law

These terms, and any dispute about them or the Service, are governed by the laws of the State of Delaware, USA, disregarding any rule that would apply the law of another place. Other local, state, national or international laws may also apply to your use. If you are a consumer, you keep the protection of any mandatory rules of the place where you live.

22. Restricted Jurisdictions

GalaShare is not offered to hosts or buyers, whether people or businesses, that are based in, incorporated in, or live in any of these U.S. states:

• California
• Illinois
• Massachusetts
• Nevada
• New York
• Texas

This section applies to hosts and buyers, meaning anyone who creates an account or buys Premium; by doing either you confirm that you are not in one of those places. Guests who upload to someone else's event are not asked to confirm this. Do not rely on a VPN, a proxy, a made-up address or any other means to hide your real location or avoid this restriction. We may refuse a sign-up, decline a payment, or suspend or close an account if we conclude that someone is in or operating from a restricted state. We may change the list when the law, regulation or our risk assessment requires. This section does not limit any right that cannot lawfully be excluded.

23. Disputes

Talk to us first

If something goes wrong, email compliance@galashare.com with a description and give us 30 days to try to fix it before starting any formal proceedings.

Individual arbitration

If we can't settle it, then wherever the law permits, the dispute will be decided by binding arbitration with a single arbitrator, not by a judge or jury, run by the American Arbitration Association (AAA) under its Consumer Arbitration Rules (or, for business users, its Commercial Arbitration Rules) in force at the time. At your choice, the hearing can be held by video call or on written papers. The arbitrator can award the same individual relief as a court, and a court may enforce the award.

Either of us may instead bring an individual case in a small-claims court that has jurisdiction, as long as it stays there. Either of us may also go to court to seek an order stopping misuse of intellectual property or unauthorised access to the Service. Any claim that is not arbitrated belongs in the state and federal courts in Delaware, and each of us consents to their jurisdiction.

You can opt out of arbitration by emailing compliance@galashare.com no later than 30 days after you first agree to these terms. Give your name and account email, and say that you are opting out. Opting out changes nothing else in these terms.

No class actions

Where the law allows, each of us may bring claims only on our own behalf, and not as part of any class, collective or representative case. The arbitrator may not combine several people's claims. If this rule cannot be enforced for a particular claim, that claim goes to court rather than arbitration.

Consumers where these clauses don't apply

The arbitration and class-action terms are not for you if you are a consumer in the EU, the UK or any other place whose law will not enforce them against consumers. In that case you can use the courts and other bodies open to you under your local law.

Time limit

Where the law allows, any claim relating to the Service or this agreement has to begin within one year of arising; later claims are barred. This does not apply where the law does not allow a claim period to be shortened.

24. Changes to these terms

We may update these terms. For material changes we will give at least 30 days' notice before they apply, by a notice on the website and, when we are able to, by email. A change will not raise the price or remove the features of something you already bought. If you keep using the Service after a change takes effect, you accept the new terms.

25. Contact

Website: https://galashare.com. Privacy, data requests, copyright and legal notices: compliance@galashare.com. Refunds, purchases and account help: contact@galashare.com. Anything else: hi@galashare.com. You can also use the contact form.

Last updated: October 23, 2026