Privacy policy

Who is responsible?

The data controller is MAXKEN, a French limited liability company (SARL) whose registered office is at Bureau 3, 34 place du Général de Gaulle, 59800 Lille, France, registered with the Lille Métropole Trade and Companies Register (RCS) under number 821 612 611, represented by its managing director (gérant), Max Bryselbout. For any question: max.bryselbout@gmail.com. The complete details are in the legal notice.

What we collect

If you organise an album (an account is required): your email address, your name, your password (stored as a hash, never in the clear) and your sign-in sessions.

If you take part in an album (no account required): the first name you type to sign your uploads and comments, and a random technical key placed on your device (see the cookies below). That key allows one thing only: recognising you as the author of your own uploads, so that you can delete them.

Optional accounts for guests. You can create a Medley account to find your albums on several devices. Albums opened while signed in are added to your list, with the date added and, if you remove them, the removal date. When you sign up or sign in, we attach contributions recognised in this browser to your account. The link between this guest identity and your account is kept for the life of the account; the transfer takes effect after authentication. These records are included in your export and deleted with your account. Saving an album does not extend access if its organiser closes it.

To understand what helps people sign up, we also record whether the account was created from an album and, when known, which suggestion was used (the permanent button or the next-day card), separately from the visit’s source. This measurement stores neither the album code nor its identifier and adds no cookie. The context is included in your export and deleted with your account.

Your browser also remembers your first visit and whether the account suggestion has been shown, so it does not repeat. These records stay on this device until you clear the site data. Removing an album from your list or deleting your account does not delete your contributions in other people’s albums: you can remove them from those albums before deleting your account, or contact us.

The album's content: the photos and videos uploaded, their technical metadata (file name, dimensions, dates) and the uploader's first name; the emoji reactions and the comments, tied to their author. Thumbnails are generated automatically for display.

The guest book's entries: the written note and, where there is one, the voice or video recording left by a guest, tied to their first name. A recording carries the voice, and a video the face, of an identifiable person: we treat them with the same care as the photos, with no automatic analysis of any kind. The organiser chooses who may view them, themselves alone or everyone with access to the album, and can close the guest book at any time.

If you buy the Event plan: the information needed for the payment and its follow-up (amount, date, status, reference of the transaction with our payment provider, date and time of your waiver of the right of withdrawal, collected before payment). Your billing address and, if you are buying for a business, its VAT number are entered on that provider’s payment page, which issues the invoice. We never collect or store your card details: they are entered directly with our provider (see Payment below).

Technical logs: like any online service, our servers record logs (IP address, request timestamps) needed for security and for the service to work.

If you upload a photo, a video, a comment or a guest book entry: we keep, alongside your contribution, the IP address it was sent from and its date. This is not a commercial choice: the French law on confidence in the digital economy requires the host of content uploaded by a third party to keep enough to identify its author, so as to be able to answer a judicial authority. That address is never displayed: not to the other guests, and not to the album's organiser. It is erased automatically after 365 days, without your contribution being deleted.

Audience measurement: we measure traffic to the site with OpenPanel, an open source tool configured without cookies and without cross-site tracking: page views, referrer, device type, as statistics. No Google Analytics, no ad network, no session recording.

Why, and on what legal basis?

• Providing the service (creating the album, receiving and returning media, signing uploads, allowing reactions and comments): performance of the contract for organisers, legitimate interest for guests taking part.
• Securing the platform (logs, abuse prevention): legitimate interest.
• Knowing what makes Medley known (the channel you arrived through, kept next to the account you create): legitimate interest. That data serves our own internal statistics alone, is passed to nobody, and serves neither advertising nor profiling.
• Inviting you to leave a review after your event (the end-of-event email sent to the organiser and, if we have switched them on, the Trustpilot invitation that follows it): legitimate interest. You can object at any time, by replying to that email or through the invitation's unsubscribe link.
• Being able to identify the author of uploaded content (the IP address kept alongside a photo, a video, a comment or a guest book entry): a legal obligation, the one article 6 of the French law on confidence in the digital economy places on a host. That data has no other use: it is disclosed only to a judicial authority that requires it, never to the organiser, never to the other guests, and it serves neither moderation nor audience measurement.
• Processing your purchase of the Event plan (payment, invoicing, follow-up, proof): performance of the contract, and compliance with our legal accounting and tax obligations for keeping the records.

Nothing else. Your data serves neither advertising, nor profiling, nor the training of models, and is never sold.

Cookies

Medley only sets cookies that are strictly necessary for the service to work, exempt from consent: that is why there is no cookie banner.

• mdl_guest (12 months): a random technical guest key, which lets you delete your own uploads and reactions.
• mdl_name (12 months): the first name you typed, so we do not ask you again.
• mdl_lang (12 months): the language you chose, so we serve you the site in it.
• mdl_attr (90 days): which door you came in through (a search engine, a social network, an AI answer, a campaign link), so we know what makes Medley known. It holds no identifier, follows you on no other site, is passed to nobody, and is read exactly once: if you create an account.
• mdl_organizer (30 days at most): set when an album’s organiser opens, without being signed in, a link from the email that hands them their photos. It lets them read the whole guest book of that album and download its complete archive, with no other right. It holds only the album’s identifier and a signature.
• Session cookies: authentication of signed-in organisers.

No advertising cookie is set, and none follows you from one site to another: mdl_attr only says which door you came in through on this one. The audience measurement (OpenPanel, described above) also works without cookies.

Who sees your content?

A Medley album is reachable by anyone holding its link or its QR code: that is the principle of the service (guests join without an account). Anyone with that link can view and download the album's photos and videos, including yours. Albums are neither public, nor indexed by search engines, nor listed anywhere: only the people the link is passed to can reach them. Only share the link with the people concerned by the event.

Outside that circle: our technical subprocessors (hosting, audience measurement, email delivery) process the data on our behalf, inside the European Union. Payment is entrusted to Stripe, under the conditions described below (Payment), including a possible transfer of your payment data to the United States. One other case steps outside that frame, and it is announced in the very email that carries it: if we have switched the review invitations on, the organiser’s name and email address and the album’s title are passed to Trustpilot (Trustpilot A/S, Copenhagen, Denmark) along with the end-of-event email, for the sole purpose of inviting them to leave a review. That transmission never concerns guests, and the invitation can be declined in one click.

Where is your data?

The media (photos, videos, guest book messages) and the service’s data (accounts, albums, comments, reactions) are hosted by OVH (OVH SAS, Roubaix, France), a French host acting as a processor, in data centres located in the European Union, with no transfer to third countries. That is a founding commitment of Medley, not an option.

The one exception is payment data: processed by Stripe, it may be transferred to the United States, with the safeguards described below. Your photos, your videos and the guest book messages are never part of it: they stay in the European Union.

Payment

The Event plan is paid on the secure payment page of Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland), a licensed payment provider. Stripe collects there what the payment and the invoice require: your name, your email address, your billing address and, if you are buying for a business, its VAT number, as well as the details of your payment method. Those details, card number included, are entered and processed only at Stripe: they never pass through our servers, and we neither see nor store them. After the payment, Stripe issues the invoice on our behalf and sends it to you by email; it is kept at Stripe, where we access it as an accounting record.

For processing the payment and issuing the invoice, Stripe acts as our processor. It also acts as a separate controller for what regulation requires of it in its own right (fraud prevention, anti-money laundering, the obligations of a payment institution): that processing is described in its own privacy policy, on stripe.com.

Transfer outside the European Union: Stripe may transfer this data to Stripe, Inc., in the United States. That transfer relies on the EU-US Data Privacy Framework, to which Stripe, Inc. has signed up, and, where applicable, on the standard contractual clauses adopted by the European Commission.

On our side, we keep only the trace of the transaction (amount, status, reference of the Stripe checkout session, date and time of your waiver of the right of withdrawal) and, on that trace, what an accounting record has to carry: your name, your email address and the album title, frozen at the moment of purchase. That is what lets us follow up your purchase and meet our accounting obligations.

For how long?

• Media, reactions and comments: kept for the album's retention period, and in any case until their deletion by their author or by the organiser, or the deletion of the album. A trial album is deleted 30 days after the event date (or after its creation, if the album has no event date or one earlier than its creation), and no later than one year after its creation unless it moves to the Event plan; an Event album is kept for 2 years from payment or from activation of the plan; an album created during the launch phase, before sales opened, stays on the Event plan and is kept at least two years after the event (see section 10 of the terms of use). We never delete an album at the end of its retention without having informed the organiser first.
• The original files: The original files of every photo and video are kept with the album and delivered in the ZIP archive, on the trial as on the Event plan. They therefore follow the album's duration, above.
• The IP address attached to a guest contribution: 365 days, the duration assigned to the identification data a host must keep. After that it is erased, and the contribution stays.
• Payment data: 10 years, the period assigned to accounting records. A confirmed payment therefore survives the deletion of its album and of its account: that is an obligation resting on us, and one the right to erasure gives way to. At the end of the term the name, the email address and the album title are erased; what is left is an amount and a date, which name nobody. The invoice Stripe issues on our behalf falls under the same retention obligation, and Stripe also keeps what it processes as a separate controller for as long as its own legal obligations require.
• The organiser's account: until it is deleted, which you can do yourself from your account page, or on request. A confirmed payment, however, stays: see the line above.
• Guest cookies: 12 months.
• The arrival channel: the cookie 90 days, and the row kept next to an account follows the life of that account.
• Technical logs: a limited period, for security purposes.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability over your data. Two reservations, and both come from the law rather than from us. The first: as long as we host content you have uploaded, the IP address kept alongside it can be neither objected to nor erased in isolation, since that is an obligation resting on the host. Delete the content and it goes with it; otherwise it erases itself after a year. The second: a confirmed payment is an accounting record, which we have to keep for 10 years even if you delete your account. Everything else goes. Two routes:

• Straight in the album: from the device you uploaded with, you can delete your own photos, videos, reactions, comments and guest book entries yourself. The organiser can remove any content from their album.
• From your account page (organisers): under your account, you can at any time change your details, export all your data as a file (portability), and permanently delete your account with all your albums and media (right to erasure, applied immediately).
• By email: max.bryselbout@gmail.com, stating the album concerned. We answer as soon as we can, and within one month at the latest.

If you believe your rights are not respected, you can lodge a complaint with your national data protection authority. The authority competent for the controller, established in France, is the CNIL (Commission nationale de l'informatique et des libertés), cnil.fr.

The image rights of the people photographed

The photos of an event often show people other than their author. By uploading a medium, you make sure it does not infringe the rights of the people appearing in it. If a photo of you has been uploaded to an album and you want it removed, contact the event's organiser or write to us: it will be removed.