Privacy notice

Last updated 28 October 2026

Craic Labs is a small business based in Dublin, Ireland. This page explains what personal information we collect, why, and the choices you have. If anything is unclear, email hello@craiclabs.com.

Who is responsible for your information

Craic Labs, Dublin, Ireland. Contact: hello@craiclabs.com.

What we collect and why

Order detailsYour name, email, phone number and delivery address, so we can confirm your order, post it and deal with any problem. Our legal basis is that we need it to carry out the contract with you.

Photos, titles and captionsWhat you add to your albums when you use our souvenir stickers. We store it so the album opens when a sticker is tapped. Our legal basis is, again, providing the service you asked for.

Emails you send usWe keep them so we can answer you and keep a record of your order.

We don't use advertising or tracking cookies, and we don't run analytics on this website.

Who can see your albums

An album is shown to anyone who taps its sticker or has its link. The link is the only protection, so don't put anything in an album that you wouldn't show someone holding that sticker. The private page that lets you edit your albums has its own secret link. Keep it to yourself, because anyone who has it can change your albums. Your pack card also carries a 6-digit owner code. It lets you choose which album a sticker opens on a phone that doesn't have your private link, so keep the card private too.

Photos are resized on your phone before upload, so the stored photo has no location data inside it. If a photo has a place and date, we record them separately, and only when you switch on the map for that album. Places are saved to about 100 metres and dates to the day. If you pick a "home" city for the opening flight animation, that choice stays in your own browser on your own phone and is not sent to us. When the map is switched off, nobody but you can see them.

Who else handles your information

Cloudflare hosts our website and the album service, stores your photos, and forwards email sent to our address. We keep photos in Cloudflare's EU storage region. Cloudflare acts on our instructions under its data processing terms, which include standard contractual clauses for any transfers outside the EU.
OpenFreeMap supplies the map pictures on the screen where an album's owner picks the place for a photo, and the map shown when anyone opens an album. The visitor's browser contacts OpenFreeMap directly, so OpenFreeMap receives their IP address. OpenFreeMap says it uses no cookies and no user accounts. See openfreemap.org.
Photon, a place-search service run by Komoot in Germany, receives the words an album's owner types into the place search box. The search goes through our server, so Photon does not receive the owner's IP address.
Our email inbox holds the emails you send us.
Brevo, an email delivery service based in the EU, sends emails from our address, such as order confirmations and replies. It receives your email address and the content of the message. Brevo acts on our instructions under its data processing terms. We only use it to send you emails about your order or ones you've asked for.
The postal service receives your name and address to deliver your order.

We don't sell your information and we don't use it for marketing unless you tell us you'd like to hear from us.

How long we keep it

Photos and albums: until you delete them or ask us to. You can delete one photo, a whole album, or everything from your own pages at any time, and the files are removed straight away. If an album hasn't been touched for two years, we'll email you before deleting it. If we stop running the service, we'll give you notice so you can keep your photos.
Backups: the album database keeps short-lived restore copies for up to 30 days, so deleted album details can remain there for that time before they disappear. Deleted photo files are not kept in backups.
Server logs: Cloudflare briefly records technical details of each visit, such as the IP address, to keep the service secure and running. We don't use them for anything else.
Order and contact details: as long as we need them to look after your order, and then as long as the law requires us to keep business records.

Your rights

You can ask us to show you what we hold about you, correct it, delete it, restrict how we use it, give you a copy, or stop using it where we rely on our own interests. Email us and we'll reply within one month. You can delete your albums yourself from your private page, or ask us to do it and we'll remove the photos and the albums from our systems. If you'd like a copy of what we hold, we'll send it as a file you can open.

If you're unhappy with how we've handled your information, you can complain to the Data Protection Commission at dataprotection.ie. We'd appreciate the chance to put it right first.

Changes

If we change this notice we'll update the date at the top.