GDPR Compliance

EventDrop is built from the ground up to meet GDPR requirements. In practice that means: your photos and event data are hosted in the EU (Supabase EU region). On upload we strip GPS location data from JPEG, PNG, WebP and HEIC photos; GIFs and videos are stored unchanged. You can request a complete data export under Art. 20 GDPR, or delete your account, at any time. Not every processor we use is based in the EU — the AI image analysis runs via Google, for example. Our privacy policy lists every processor, where it is based, and how long we keep each type of data.