Samshots Studio is run by Samshots Photo & Video, Rockville, Maryland ("Samshots", "we"). It exists for one purpose: to carry your wedding booking from the day you sign to the day your photographs are delivered. It collects only what that purpose needs. There is no advertising, no analytics tracking, no session recording, and nothing is sold or shared for marketing.
What we keep, and why
Your booking
Your first names, the wedding date, the venue, the package you booked, the people on Sam's team for your day, your milestones, and your vendors' names and phone numbers if you add them. Purpose: to plan and shoot your wedding.
Sign-in
The email address on your booking. We email you a one-time link to sign in; we never store a password. We keep a hashed record of each link and each signed-in session so a link works once and a session ends. Purpose: to let you, and only you, see your booking.
What you write
Your day-of timeline, your family formals list, and messages you send to Sam. Purpose: so Sam has them on the day and can answer you.
Delivery
Links to your gallery and film, your guest PIN, and the date they were delivered. The photographs themselves live with our gallery provider (Pixieset) and film host (Vimeo), under their own privacy terms.
Sign-in protection
To stop abuse of the sign-in form we count requests per email address for one hour. Where the deployment is configured for it we also count requests per connection using a salted one-way hash of your IP address; the address itself is not stored. These counters are deleted within a few hours.
What we do not do
- No advertising or social-media pixels, no Google Analytics, no session replay, no third-party cookies.
- No sale of personal data, and no sharing for anyone else's marketing.
- No targeted advertising, to anyone, of any age.
- No location tracking. Sunset times are worked out from the venue's address on your booking, not from your phone.
Because the app sets no tracking cookies and does not sell or share data, a Global Privacy Control signal from your browser changes nothing — there is nothing to opt out of. We honor it anyway by design.
Who else sees it
Sam and the people working your wedding, so they can shoot it. Caprenna LLC, who build and maintain this app for Samshots, can access the system to keep it running and only for that purpose. Infrastructure providers process data on our behalf: Cloudflare (hosting and database, United States) and Resend (sign-in and notification email). None of them may use your data for their own purposes.
How long
- Booking, timeline, formals, delivery links: for the life of your booking and two years after delivery, so you can still find your gallery link. Then deleted.
- Messages to Sam: two years after delivery. Then deleted.
- Sign-in links: 15 minutes. Sessions: 90 days without use, or the moment you sign out.
- Sign-in counters: a few hours.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, or delete it, and we will do it within 45 days. Maryland, Virginia, California and most other U.S. state privacy laws give you these rights formally; we apply them to everyone. Email info@samshots.com from the address on your booking, or use "Message Sam" inside the app. We will not treat you differently for asking. If you believe we have not handled a request properly you may appeal by replying to our answer, and you may contact your state attorney general.
Children
The app is for the couple who booked. We do not knowingly collect anything from anyone under 18, and we do not advertise to anyone.
Security
Everything travels over HTTPS. Sign-in tokens and session identifiers are stored only as one-way hashes. Access to the system is limited to the people named above. If a breach ever affects your data we will tell you as the law requires.
Changes
If this policy changes in a way that matters, the date at the top changes and you will see a notice in the app. Questions: info@samshots.com · Samshots Photo & Video, 152 Rollins Ave #200, Rockville, MD 20852.