Terms and conditions

Effective from: 25 July 2026

1. General provisions

These terms and conditions govern the rights and obligations between the operator and the user in providing FotoQR, a service for creating private galleries to collect and share photos via QR code or private link.

Operator:

• spinout, s. r. o.
• Registered office: Karpatské námestie 7770/10A, 831 06 Bratislava – Rača district
• Company registration number: 51 430 461, Tax ID: 2120751820, VAT ID: SK2120751820
• Registered in the Commercial Register of the Bratislava District Court, limited liability company
• Email: info@spinout.sk

Supervisory authority: Slovak Trade Inspection, SOI Inspectorate for the Bratislava Region, Bajkalská 21/A, P. O. BOX No. 5, 820 07 Bratislava, www.soi.sk.

2. Definitions

• Operator means spinout, s. r. o.
• User or gallery organiser means the person who creates the gallery and manages its settings.
• Payer means the person who orders and pays for a paid gallery expansion. The payer may be the gallery organiser or a QR guest if the purchase option is shown to them in the gallery.
• Consumer means a natural person who uses the service outside their business activities.
• QR guest means a person who opens a QR code or private link and uploads or views photos according to gallery settings, and may purchase an expansion for that gallery.
• Gallery means a separate space for a particular experience, event, gathering or activity.
• Content means primarily encrypted display copies, encrypted thumbnails and, when full quality is enabled, encrypted original photos or videos, optional guest notes and related technical data.
• Private key means the part of the link or QR code required to decrypt photos in the browser.
• Gallery password and upload password are optional paid features for guests. The organiser may require the gallery password before opening the gallery, and the upload password only before adding photos or videos. They are not photo encryption keys.
• Paid features means features unlocked for a particular gallery after a successful paid purchase, including access to stored originals, ZIP export, guest downloads, gallery passwords, upload passwords, photo approval before publication, video uploads, custom upload confirmation and additional colour themes.

3. Service description

FotoQR lets users create a gallery, obtain a QR code and private link, collect and display photos, and configure upload closing times, order, appearance, a soft per-browser limit, optional guest notes and daily email summaries. After a paid purchase, users can also use paid features, including access to originals, ZIP export, guest downloads, passwords, approval, videos, custom confirmation and additional themes. A paid expansion is always tied to a particular gallery.

FotoQR is a temporary service for collecting, sharing and delivering event photos or videos. It is not intended as permanent storage, a backup, an archive or long-term storage for sensitive or irreplaceable data.

QR guests do not need to install an app or create an account. Photos are encrypted before upload. With full-quality storage enabled, the service may also store an encrypted original, although accessing and downloading it requires a paid expansion. Before storage, the service processes photos: it removes embedded metadata (such as EXIF, including GPS location) and converts some formats to JPEG (such as HEIC). The stored full-quality original is therefore a processed copy at the highest available quality and may not be byte-for-byte identical to the uploaded file. The operator normally cannot display photos in readable form because it does not store the gallery's private key in readable form. The gallery key also encrypts optional guest notes, the organiser's message to guests, upload confirmations and QR poster text; the gallery name and other operational metadata remain unencrypted.

The service and encrypted gallery data are operated in the European Union by Hetzner in Germany.

4. Gallery creation and conclusion of the contract

The contract is concluded electronically by creating a gallery, creating an account or ordering paid functionality where available. For paid expansions, the contractual relationship is between the operator and the payer; the expansion may be provided for the organiser's gallery as performance benefiting that specific gallery. Users must provide a truthful email address and protect access to their account, QR code and private link.

After gallery creation, users receive access to gallery management, the QR code and the private link for QR guests. Users are responsible for whom they give the QR code, link, gallery password or upload password to. Where the option to purchase an expansion is shown, a QR guest may pay for a one-off expansion; this does not grant access to gallery management, ownership of content or new rights to photos.

5. Prices and payment terms

Where the service or part of it is provided free of charge, users have no payment obligation for its use. The basic free gallery includes 50 photos and 7 days of validity. Thumbnails never count towards the gallery's storage limit. With full-quality storage enabled, the stored original counts towards the limit and the smaller display copy does not; with full-quality storage disabled, the stored compressed photo copy counts towards the limit.

Paid expansions for one gallery are: 100 photos and 1 GB of storage for 4.90 € including VAT, 300 photos and 3 GB for 12.90 € including VAT, 1,000 photos and 10 GB for 24.90 € including VAT, and a standalone 30-day extension from 3.90 € including VAT. The standalone extension price is calculated from the gallery's current storage and shown before ordering. Every paid purchase also sets gallery validity to 30 days from purchase and unlocks paid features for that gallery. The organiser or a QR guest may buy an expansion. This is a purchase of a digital expansion for a specific gallery. The price is shown before ordering in euros, including VAT.

The operator does not process or store payment card details. Online payments are processed by Stripe or another stated payment service provider. The expansion is activated electronically after successful payment confirmation. The payer receives the required confirmation or tax document electronically, usually through the payment provider or at the email supplied when ordering.

6. Delivery and activation of the service

The service is provided electronically. The gallery is available after creation unless technical problems, maintenance or security measures prevent access. A paid expansion is activated electronically for the particular gallery after successful payment confirmation; it is not a physical product. The operator will make reasonable efforts to keep the service available and resolve errors.

7. Private key, encryption and loss of access

The private key is required to display photos. It is part of the QR code or private link and may be stored in the organiser's browser. If the organiser has a password-protected account, the gallery key is automatically stored in the account only in encrypted form and, in normal use, is unlocked with the password in the browser. For registration, login or verification, the password is transmitted over HTTPS but is not stored in readable form. The stored backup alone cannot be read without the password.

Gallery and upload passwords are optional paid features that provide additional checks for QR guests. They are stored only as one-way hashes and cannot be displayed or recovered after being set; the organiser must therefore communicate them to guests separately. These passwords do not decrypt photos.

The operator does not store the private key in readable form. If the user loses the private key and cannot recover it from their account, the operator cannot recover or decrypt the encrypted photos.

8. Gallery validity and deletion

Galleries are normally deleted automatically 7 days after creation unless the user extends validity or deletes them earlier. Every successful paid purchase sets that gallery's validity to 30 days from purchase. Users may also delete a gallery manually.

If the user does not extend validity before expiry, service provision and the contractual relationship for that gallery end when it expires. After expiry, the gallery may be automatically deleted. Users may later create a new empty gallery, but content from the deleted gallery is neither transferred nor restored.

Gallery deletion is permanent: gallery records, photo records and stored encrypted files, including originals, display copies and thumbnails, are removed. Content cannot be recovered after deletion.

The operator sends the organiser warnings before scheduled gallery deletion if their email is available. For paid galleries, warnings are sent approximately 7 days, 3 days and 1 day before deletion; for free galleries, approximately 1 day before deletion. Sending a warning does not guarantee an extension or recovery after deletion.

New galleries have a 06:00 new-upload summary enabled by default. The organiser can independently enable or disable morning summaries at 06:00 and evening summaries at 18:00. If several galleries receive uploads, the service combines them into one email at that time. Summaries are sent only to a verified email and only when there are new uploads; delivery may be neither immediate nor guaranteed.

9. Withdrawal from the contract

Where the payer is a consumer and the service is provided for payment, they have the right to withdraw from a distance contract within the statutory period unless legislation provides an exception.

A paid expansion is a digital service for a specific gallery. After successful payment, it is activated without delay so the increased capacity, storage or extended validity can be used immediately. By submitting the order and paying, the payer acknowledges that service provision begins before the withdrawal period expires; where legislation links complete provision of a digital service to loss of the right of withdrawal, that legislation applies.

Model withdrawal notice

10. User rights and obligations; gallery content

• Users are responsible for their gallery content, including photos uploaded by QR guests.
• Users are responsible for ensuring that collecting, sharing, displaying and downloading photos does not infringe third-party rights, particularly personality rights and rights under personal data protection legislation.
• Users must obtain necessary consent from people depicted or another appropriate legal basis for using photos in the gallery, and appropriately inform participants who will have access.
• The optional guest note is intended only for the organiser and is encrypted with the gallery key, so only a person with that key can read it.
• The per-browser limit is a soft organisational restriction. Clearing cookies or changing browser or device may reset it, and the operator does not guarantee unique identification of a person.
• Uploading content that is illegal, violent, hateful, pornographic or infringes copyright or others' privacy is prohibited.
• Where content includes children or sensitive situations, users must act carefully and lawfully and obtain a legal guardian's consent where needed.
• Users acknowledge that people with the QR code or private link may see photos if gallery viewing is enabled. If a gallery password is enabled after a paid purchase, they also need that password. If an upload password is enabled, they need it before adding content. If photo approval is enabled, new photos from QR guests remain hidden after upload until the organiser publishes them.
• Users acknowledge that a QR guest may buy an expansion for a specific gallery if the service offers this option. Such a purchase does not change the organiser's responsibility for gallery content or give the payer access to gallery management.
• Users must protect the QR code, private link, gallery password, upload password and account access against unauthorised persons.

11. Operator rights and obligations

• The operator undertakes to provide the service with reasonable professional care.
• The operator may temporarily restrict service availability during maintenance, a security incident or evident abuse.
• The operator may remove content or suspend a gallery where content is clearly illegal, breaches these terms, or where a valid request is made by an affected person or public authority.
• The operator does not systematically monitor galleries or approve content before upload, and cannot display photos in readable form without the private key.

12. Complaints and liability for defects

If the service does not work properly, users may submit a complaint by email to info@spinout.sk. The operator will acknowledge receipt and resolve the complaint within 30 days of submission unless legislation specifies another period.

13. Limitation of liability

The operator is not responsible for content uploaded by users or QR guests, the gallery organiser's failure to obtain necessary consent or another legal basis, loss of access caused by the user's loss of a private key, password or QR link, or outages caused by circumstances beyond the operator's reasonable control. This does not affect consumer rights or the operator's obligations under applicable legislation.

Users must download or export any photos they wish to keep before gallery expiry or manual deletion. Bulk ZIP download is a paid feature and runs in the user's browser using the private key. It uses stored originals where available, otherwise the highest-quality available display version. Stored data cannot be recovered after automatic or manual gallery deletion.

14. Personal data protection

Personal data processing is governed by the privacy policy, which forms part of the information provided to users.

15. Alternative dispute resolution

Consumers may request a remedy from the operator if dissatisfied with how a complaint was handled or if they believe their rights were infringed. If the operator rejects the request or does not respond within 30 days, the consumer may initiate alternative dispute resolution.

The competent alternative dispute resolution body is the Slovak Trade Inspection or another authorised legal entity listed by the Ministry of Economy of the Slovak Republic.

16. Final provisions

Matters not governed by these terms are subject to the laws of the Slovak Republic, particularly the Civil Code and Act No. 108/2024 Coll. on consumer protection. The operator may amend these terms; contracts are governed by the version effective when the order was placed. The current version is always available on this page.