Privacy and retention

Guests put their words, faces and voices on your screens. Wunderframe keeps as little as it can, for as long as you allow, and an owner sets the limits for the whole workspace.

Unless an owner switches it off, the guest page asks guests to agree before their first post: I agree that my post and photo are shown on the screens at this event and kept until the retention period ends. The phone shows it once and remembers when the guest agreed. An owner can change the text for the workspace, and an engagement can use its own (Privacy → Use my own consent text).

• The post — the text, the photo, the Live clip or the video, and the corrected captions. The photos, clips, videos and selfies are filed in the engagement’s folder in Assets.
• The name the guest typed, if any, and their selfie, if they took one. Guests are never identified beyond the name they chose — there are no guest accounts.
• The room they scanned from, and when they agreed.

A video’s sound is only kept when the workspace and the engagement allow videos with sound. Speech for captions is turned into text on the guest’s phone; no recording goes to a speech service.

Each photo is checked for faces on our own platform — the picture never goes to an outside service — only to find where the faces are, so the polaroid is framed around all of them. The boxes around the faces and the framing are all that is kept, and they are deleted with the photo. Nobody is recognized, and no face is compared with another.

Posts are kept for a number of days — 30 unless an owner changes it. Every night, each post that old is deleted with its files (photo, clip, video, keepsake), and an engagement whose last post is that old goes with its selfies too — whichever comes first, so an engagement that is always open keeps its promise as well. An engagement can keep them for a different time (Privacy → Keep posts for a different time), but never longer than the workspace’s maximum. Guests are told the days before they post.

To take one post off the screens, press Remove from screens on the Live board (ten seconds to undo). A guest can take their own photo down from My posts or the take-home page: it leaves the screens at once and is deleted with its keepsake. To delete everything at once, delete the engagement from the Run → Engagement list: its posts, photos and videos go with it, its QR codes stop working, and walls pointing at it show nothing.

Owners set them in Settings → Engagement; everyone else sees them read-only. Every engagement follows them, and an engagement editor that asks for more says why a switch is locked.

• Consent — whether guests agree before they post, and the text.
• How long posts are kept — Usually (what a new engagement gets, 30 days) and At most (365 days unless you change it).
• How long a polaroid stays up — the seconds for a short, medium and long stay on a polaroid wall (8, 15 and 25).
• Live polaroids — allowed or not, and the longest clip (up to 5 seconds).
• Video polaroids — off until allowed; the longest video (up to 60 seconds); and Videos may keep their sound. With that off, every video plays silent, whatever an engagement or a wall says.