Who can see your photographs.

Who we are

Night Knows is nightknows.com, operated by Beyza Karpuzcu Teoman, a sole proprietor in Brooklyn, New York. Write to hello@nightknows.com about anything on this page, including a request to see or delete what we hold about you.

If you are a guest at somebody's event

You are asked for a first name. That is the whole of it — no account, no password, no email address, and nothing that identifies you beyond the name you chose to type.

What you send — photographs, voice notes, written answers — belongs to the event you sent it to. It is shown in that event's album, attributed to the first name you gave. You can remove anything you contributed from your own page for as long as the event is open.

We do not build a profile of you, we do not track you across events, and nothing you send is used to advertise anything to you.

The selfie, and face matching

This is the only part of the product that handles biometric information, it is optional, and nothing happens unless you agree to it on the screen that asks.

If you take a selfie, our own server turns the face in it into a list of 512 numbers — a mathematical description, from which no photograph of you can be reconstructed. That list is compared against faces found in photographs from the same event, so that your own pictures can be gathered for you instead of you scrolling through three thousand.

It runs on our own machines, with models that live in our own server image. Your face is never sent to Amazon, Google, Microsoft, Clearview or any other recognition service, and no third party receives it at any point.

It is used for one purpose and inside one event. It is never used to identify you at a different event, never sold, never licensed, never shared, and we take no payment of any kind in connection with it.

Retention and destruction: the numbers are deleted when the event they belong to is deleted, and in any case no later than the end of that event's retention period, which is one year from the date the event was bought. If you skip the selfie, none of this is ever computed for you.

If you are a host

We hold your email address, the events you build and everything in them. You sign in with a link sent to your email; there is no password for us to lose.

Payments are taken by Stripe. Your card number is entered on Stripe's systems and never reaches ours — we store the fact that an event was paid for and how much, and nothing about the instrument.

Who can open an album

An album is private by default. Before the night is over it opens for the host and for guests who were there. Afterwards it opens for anybody with the link only if the host has chosen that; otherwise it stays closed to everybody except the host.

Albums and guest screens carry instructions telling search engines not to index them, and they are deliberately absent from our sitemap. Nobody's wedding should turn up in a search result.

How long anything is kept

Photographs, voice notes and everything derived from them are kept for one year from the date the event was bought, and are then removed along with the album, the film and any face numbers.

Guests may keep uploading for ten days after an event begins; after that the door is closed and nothing further can be added.

A host can delete an event before any of that, which removes its media and everything built from it.

Where it is stored

In the United States. The database is hosted by Supabase in AWS us-east-1, media is in Cloudflare R2, and the service that builds albums and films runs on Fly.io in Virginia.

If you are in the United Kingdom or the European Union, that means your information is transferred to and processed in the United States.

Who else touches it

Five companies, each for one job: Vercel hosts the website, Supabase hosts the database, Cloudflare stores media, Stripe takes payments, and Resend sends the emails the product has to send.

Nobody else receives your information, and none of these are advertising companies.

Cookies

Two, and both are the kind that make the thing work rather than the kind that follow you. A guest's phone holds one so that the event remembers they are in it as they move between screens; a host's browser holds one so they stay signed in. Neither follows anybody to another website, and neither is used for advertising.

Nothing we measure uses a cookie at all, which is why this site never asks you to accept anything when you arrive.

Clearing them signs a host out, and loses a guest's link to what they sent unless they added an email to keep it.

Measurement

We count visits to our public pages — the home page, the pages about each kind of event, pricing and help — using Vercel's analytics, which sets no cookies and identifies nobody.

Albums, guest screens and hosts' own pages are never measured. Somebody at a wedding is not a visitor to a website, and a page a customer paid for is not a place to put a counter. That is why this site asks you to accept nothing when you arrive.

What you can ask for

A copy of what we hold about you, a correction, or deletion. Write to hello@nightknows.com and say which event you were at and the first name you used, so we can find you.

If you are a guest and want something you contributed taken down after the event has closed, write to us and we will remove it.

Children

This is sold to adults organising events. We do not knowingly collect information from children under 13, and we never derive face numbers for anyone who has not agreed on the consent screen themselves.

Changes

If this page changes in a way that matters, the date at the top changes with it and hosts with an active event are told by email.