Your camera stays under your control.

What LarpCam processes

• An automatically generated account identifier stored securely on the director’s device.
• Shoot metadata, including connection status, timestamps, and technical identifiers.
• Reference images chosen by the director and photos intentionally captured during a shoot.
• Operational diagnostics needed to secure, maintain, and troubleshoot the service.
• The email address and message you choose to send through Support, plus a one-way network identifier used only to prevent abuse.
• Pinterest authorization tokens and selected Pin metadata only when Pinterest is connected.

LarpCam does not use camera or photo data for advertising, facial recognition, model training, or cross-app tracking.

Camera access and live video

The person scanning a shoot QR must tap “Allow camera” and approve the browser’s camera permission. Live video is transported through LiveKit so the director can frame the shot. LarpCam does not record the livestream. A still image is created only when the director or photographer presses the shutter.

The photographer can stop sharing at any time. Shoot links expire automatically and can be ended or replaced by the director.

Storage, security, and retention

Photos and references are stored in a private Supabase Storage bucket. Access is granted through short-lived signed URLs after server-side authorization. QR secrets are stored only as one-way hashes, and realtime credentials expire with the shoot.

Completed media remains available until it is deleted in LarpCam or the associated account is deleted. Empty ended shoots are removed after 30 days, incomplete uploads are marked failed automatically, and short-lived abuse-prevention counters are removed after 48 hours. Support and operational records may be retained for a limited period when necessary to respond, secure the service, prevent fraud, or comply with law.

Service providers

LarpCam uses Supabase for authentication, database, and private storage; LiveKit for realtime video and commands; Vercel for the guest camera website and API; and Pinterest only when the optional Pinterest connection is enabled. These providers process only the data needed to deliver their part of the service.

Your choices

• Decline or revoke camera and photo-library access through device settings.
• Delete individual photos from a shoot gallery.
• Disconnect Pinterest without affecting local reference imports.
• Delete the account and associated shoots, references, photos, and connections.

See Delete account and data for the current deletion path or use Support if the app is unavailable.

Children and changes

LarpCam is not directed to children under 13. If this policy changes materially, the effective date above will be updated and an appropriate notice will be shown.