Privacy policy
Last updated: September 25, 2026
Who we are
Subila (subila.com) is a service for collecting the photos and videos guests take at an event into one private album. We operate from Argentina and are the data controller for the processing described in this policy. For any question, write to [email protected].
Host data
When you create an account we store your name, your email and an encrypted version of your password, or your Google account identifier if you sign in with Google. We also store your chosen language, the events you create (name, link, type, plan) and the activity needed to run your account, such as the access codes you redeem.
Guest data
Guests do not need an account. When someone uploads to an album we store the files, their file name, size and type, the upload time and an anonymous identifier kept in a cookie on the device for one year. That identifier lets us show each guest what they uploaded and avoid duplicates; we do not link it to a name or email. If the album allows it, a guest may optionally add their name or a caption.
Photos and videos
Uploaded content belongs to the person who uploaded it and to the event host. We use it only to run the service: store it, generate smaller versions so it loads fast, display it inside the album and on the live screen, and make it available for download. It can be seen by the host and by anyone who has the album link or QR code. We do not use your photos for advertising, to train models, or share them with third parties beyond the providers listed below.
How long we keep content
An event's files are kept for the length of its plan: 7 days on the Free plan and 6 months on the Pro plan, counted from when the event was created. When that window ends the files and their smaller versions are permanently deleted. Download everything before it expires. Account data is kept while the account is active; if you close it, we delete it within 30 days unless the law requires us to keep something.
Cookies
We only use necessary cookies: a session cookie to keep you signed in as a host, a temporary cookie during Google sign-in, a cookie with the anonymous guest identifier and a cookie with your chosen language. We do not use advertising cookies.
Analytics
We use PostHog to understand how the product is used (for example, which screens are visited or whether an upload fails). For signed-in hosts, analytics is tied to your account; for guests, to the anonymous identifier. Photos and videos are never sent to the analytics tool.
Providers
To run the service we use providers that process data on our behalf: Hetzner (servers and database, in the European Union), Cloudflare (content delivery and file storage), Resend (transactional email such as password resets), Google (Google sign-in, only if you choose it) and PostHog (analytics). All of them are contractually bound to protect the data and to use it only to provide their service to us. Some data is processed outside Argentina.
Security
Connections are encrypted with HTTPS, passwords are stored hashed and file links are protected. No system is perfect: if we detect an incident affecting your data, we will notify you.
Your rights
You can access your data, correct it, ask us to delete it or request a copy by writing to [email protected] from your account email. Hosts can delete any photo or video from their album in the dashboard. If you are a guest and want something you uploaded removed, write to us with the album link. In Argentina, the Agencia de Acceso a la Información Pública is the supervisory authority under Personal Data Protection Law 25.326.
Children
You must be at least 18 to create an account. The host is responsible for having the necessary consent for photos in which minors appear.
Changes
If we change this policy in a meaningful way, we will update the date above and email hosts with an active account.