What we keep, and why.

Effective 25 October 2026. Questions or deletion requests: use the contact form.

The short version

Rooms are private. A room is only visible to someone with its link (and its code, if it has one).
We don’t show ads or sell data. We count visits ourselves and with Google Analytics (below); its cookies are set only if you accept.
Location data is removed from every photo before it is uploaded.

If you make a room

Your account. You sign in with Google, Apple or an emailed link. We keep your email address and, for Google or Apple, the name they share with us, so you can sign in again and own your rooms.
What you upload. Your photos (resized, with the camera data inside each file removed, location included), and for each photo the date it was taken, the town it was taken in, and where each came from (the camera, the file’s name, or a messaging app). The town is worked out on your device from the photo’s location; the location itself is never stored or sent. Also the titles, captions, questions and answers you write, and any short recordings (audio notes and spoken answers) you record or upload.
The microphone is used only while you record an audio note, and only after you allow it.
Access codes are stored only as a one-way hash. Nobody, including us, can read the code back.
Answers. When visitors answer your photos’ questions, the answers are shown to you, with a name if the visitor chose to give one. Answers are open for the time you choose when you publish; after that, your room shows everyone’s answers, and your own, to everyone who visits. Visitors are told this before they answer.
Answers. When visitors answer your photos’ questions, the answers are shown to you, with a name if the visitor chose to give one.
Visits. We count how many people walk into each of your rooms, and show you the number. If you made your room after visiting someone else’s, we note which room that was. That room’s owner isn’t told who you are.

If you visit a room

You don’t create an account. Your browser or the app gets an anonymous session ID so the room can be opened for you.
If you answer a question, your answer goes to the person who made the room, with your name if you gave one when you walked in (it’s optional). They can see and delete them. If the room shows a date when answers close, then after that date your answer, with the name you gave (or the one shown for you), is shown to everyone who visits the room. Answers given before rooms worked this way stay with the room’s owner only.
If you answer a question, your answer goes to the person who made the room, with your name if you gave one when you walked in (it’s optional). They can see and delete them.
When you walk into a room, we note that this anonymous session ID visited it, when first and when last. The room’s owner sees only how many people visited, not who. If you later make a room of your own, we note which room you’d visited. We use this to see whether Everhall works, and nothing else.
If you report a photo, we keep the report and your anonymous session ID so we can review it. The room’s owner isn’t told who reported it.
Your answers are also kept on your device so you can see them in “Your visit”. Clearing them there removes the copy on your device.

Analytics

We use Google Analytics (through Firebase) to see which pages people open and which steps they take: whether they start a tour, send an answer or make a room, and roughly where and on what kind of device. It never receives your name, your photos, your stories or your answers.
On the website, without your consent it works without cookies and stores nothing on your device; if you accept cookies, it also sets cookies to tell your visits apart.
In the app, Analytics is part of the app: it keeps an identifier inside the app to tell your visits apart.
We use it to see where people get stuck, and nothing else. Google processes it for us under its terms; we don’t use it for ads.
On the website, change your choice any time with Cookie settings at the bottom of the page. Your choice is kept on your device only.

Where it’s stored

Everything is stored with Google Firebase (Authentication, Cloud Firestore, Cloud Storage and Cloud Functions), which processes it on our behalf. Photos you’ve viewed may be cached on your device so a room opens faster next time.

Town names come from GeoNames, used under the Creative Commons Attribution 4.0 licence, and are looked up on your device.

Keeping and deleting

We keep your rooms and account until you delete them or ask us to.
You can remove any photo, audio note or answer from the dashboard at any time.
To delete your account and everything in it, choose Delete account in the app (under Me) or at the bottom of Your rooms on the dashboard. Your rooms, photos, recordings, the answers you’ve given and the record of your visits are deleted straight away. If you can’t sign in, write to us through the contact form and we’ll delete it within 30 days.

Children

Everhall isn’t directed at children under 13, and we don’t knowingly collect their information.

Changes

If this policy changes, we’ll update this page and its date.