Live Chilli
Privacy Notice
1. Who we are
Live Chilli (livechilli.com) is operated by Chilli. Contact: hello@livechilli.com.
2. Account data we process
When you sign up or use the Service, we may process:
- name and email;
- login data (password hash or Google account identifiers);
- FTP credentials we generate for your camera uploads;
- IP address, browser/user agent, and basic usage logs;
- terms acceptance (version, time, IP);
- project/gallery settings and operational stats needed to run the Service.
3. Why we process it
To create and secure your account, provide the Service, prevent abuse, send transactional email (such as confirmation), and meet legal obligations. Legal bases include contract performance and legitimate interests in operating a secure service. Optional features that need consent (for example Find me guest search) ask for it separately.
4. Event photos and guests
Photos you upload and publish are processed to deliver your galleries. For that Content and for guests who appear in it, you are the controller. You decide what is published and who can access it. See the Terms of Service.
4a. Find me (guest face matching)
When a photographer enables Find me, Live Chilli builds a face index from gallery photos and may match a guest selfie. That is biometric processing. The photographer is the controller and must have a lawful basis to enable indexing; guests who search give separate explicit consent for their selfie. Enabling Find me also accepts the Data Processing Agreement.
- Data: the selfie (processed in memory, not stored), face embeddings derived from gallery photos (stored in
faces.jsonwhile Find me is on), and the guest's email plus consent record. - Purpose: to show the guest only the photos they appear in.
- Legal basis (guest search): explicit consent (Art. 9(2)(a) GDPR where applicable). Guests must be at least 16.
- Legal basis (gallery face index): the photographer's responsibility as controller; Live Chilli acts as processor under the DPA.
- Retention: selfies are not kept; the face index (
faces.json) and guest consent audit file are deleted when the photographer turns Find me off or deletes the gallery; a browser cookie remembers consent for up to 30 days; unverified consent emails expire after 24 hours and are removed; expired consent rows are pruned automatically. - Withdrawal: use the one-click link in your confirmation email, the withdraw option in the gallery, or email hello@livechilli.com from the address you used.
- Email: we send a confirmation link to the address you provide; Find me starts after you confirm (link valid 24 hours). We then send a short record copy.
See the Data Processing Agreement for Art. 28 terms between photographers and Live Chilli.
4b. Photo metadata (EXIF / GPS)
Published gallery photos, guest downloads, zip exports, studio full-size previews, and hub cover images are re-encoded as JPEG. Camera EXIF and GPS location from the original file are not retained on those outputs. Photographer inbox copies received over FTP may still hold original metadata until they are edited or normalized for size; that inbox is private to the account, not the public gallery.
5. Sharing
We use processors needed to run the Service (for example hosting, email delivery, authentication providers such as Google if you choose Google login). We do not sell your account data.
6. Retention
We keep account data while your account is active and for a reasonable period afterward for security, backups, and legal claims. Gallery Content follows your settings and our expiry/deletion practice.
7. Your rights
Depending on applicable law (including GDPR where it applies), you may have rights to access, correct, delete, restrict, or port account data, and to object to certain processing. Contact hello@livechilli.com. You may also complain to a supervisory authority.
8. Security
We apply technical and organisational measures appropriate to the Service. No method of transmission or storage is perfectly secure.
9. Cookies and local storage
We use essential cookies and similar storage so the Service works. We do not use advertising cookies, marketing pixels, or third-party analytics cookies. Essential cookies do not require a marketing consent wall; this section explains what we set.
chilli_sess· keeps you logged in (HttpOnly, SameSite=Lax, about 30 days).chilli_invite· short-lived invite code while you sign up (about 1 hour).chilli_terms· short-lived proof that Terms and Privacy were accepted during Google signup (about 10 minutes).chilli_oauth_state· CSRF protection for Google login (about 10 minutes).chilli_gal_*· remembers a guest gallery password unlock on that browser (about 7 days).- Find me consent cookie · after a guest verifies email and consents, remembers that consent for the gallery (up to 30 days, path-scoped).
chilli_vid· anonymous visitor id for basic gallery stats when enabled (HttpOnly, long-lived).
In the browser we may also store theme preference (chilli-ui-theme) and that you dismissed this cookie notice (chilli-cookie-note) in localStorage. Those stay on your device and are not ad trackers.
You can clear cookies and site data in your browser settings. Clearing the session cookie signs you out. Clearing a gallery unlock cookie asks for the password again.
This notice is a practical draft. It is not legal advice. Have qualified counsel review it.