Last updated 11 September 2026
Guests don't make accounts and we never ask for their email. Whatever you send is seen by the person organising the event and whoever is in the room when it plays — nobody else. There are no cookies, no analytics and no advertising anywhere in this service, and we don't sell anything to anyone.
Ten days after the event, all of it is deleted automatically. If you paid us, we keep the payment record itself — tax law requires it — but nothing anyone wrote or photographed.
Celebrer is published by One Last Job (ABN 77 839 048 440), based in Victoria, Australia. In this policy, "we" and "us" mean One Last Job.
We use your email for exactly one thing: sending you the two links to your event when you create it. We don't send marketing, and we don't add you to a list.
We never see your card details. Payment happens on Stripe's own page. Your card number, expiry and security code go straight to Stripe and never touch our servers — there is nowhere in Celebrer they could be stored.
That's the lot. No email address, no phone number, no account, no password.
Your browser stores one thing on your own device: the volume you last set in the player. It stays on that device and is never sent to us.
If you choose a song from your own device to play under the show, that file is read by your browser and played from where it already is. It is never uploaded, never stored by us, and never sent anywhere. That's why you have to pick it again each time the show opens.
Messages and event details are stored in a Cloudflare D1 database, and photos in Cloudflare R2 storage. Both are in Cloudflare's Oceania region, which covers Australia and New Zealand.
The photo storage is private. Photos have no public web address — they can only be fetched through the event itself, by someone who already has the link.
Three companies handle data on our behalf, and no one else:
We don't share anything with anyone else, other than where we're required to by Australian law.
Nothing is indexed by search engines, listed publicly, or discoverable by anyone who hasn't been given a link.
Ten days after the event date, everything is deleted. The messages, the photos and the event itself. This runs automatically once a day and it is permanent — we can't get it back, and neither can you.
This is not a backup service. If the organiser wants to keep the photos or the messages, they need to download the album before the deletion date. That date is shown on the organiser's dashboard from the moment the event is created, and we email a reminder three days before.
If the organiser paid, the record of that payment has to be kept: the amount, the date, and the email address it was charged to. Australian tax law requires a business to keep its transaction records for five years, and that obligation sits outside our own deletion promise.
It is a financial record, not event content. No message, no photo and no guest's name is kept for tax purposes. Those all go on day ten, as described above.
An event has no password. The organiser's private link is the key: anyone who has it can read everything and delete anything. It should be treated like a password and never forwarded.
We can't recover it if it's lost, because there's no account to recover it to. That's also why the app emails it to the organiser when the event is created.
People send photos containing other people. If you appear in a photo someone else sent and you'd rather you didn't, ask the organiser — they can delete it in a few seconds. You can also contact us and we'll help.
Celebrer isn't designed for or directed at children, and we don't knowingly collect information from them. Children do send messages at family events, and that's expected — but it's the organiser's responsibility to be comfortable with who they've shared the link with.
You can ask us to give you a copy of what we hold about you, correct it, or delete it. The fastest route for a guest is usually to ask the organiser, who can delete a message immediately. Otherwise, email us and we'll act on it.
The one thing we can't delete on request is a payment record, for the five years Australian tax law requires us to keep it. Everything else, we can.
One Last Job is a small business, and we handle personal information in line with the Australian Privacy Principles. If you're unhappy with how we've handled something, tell us first — and if we don't resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
If personal information is exposed in a way likely to cause serious harm, we'll tell the people affected and take whatever steps we can to limit the damage.
If this policy changes we'll update the date at the top. Material changes will be noted on the site.
Email hello@celebrer.app.
Celebrer is published by One Last Job, ABN 77 839 048 440.
Terms of use · Home