Control
Private event boundaries
Event data is scoped by membership, ownership, host authorization, and server-side validation rather than by hidden buttons alone.
Security by event boundary
The gallery should feel effortless to guests and remain controlled by the people running the event.
GatherSnaps separates public marketing pages, authenticated app pages, event membership, co-host permissions, original-host authority, and public single-photo sharing. This page explains the product controls without pretending that any web application is risk-free.
Core controls
Practical protections across the event lifecycle.
Control
Host and co-host permissions
Original-host-only operations remain separate from the narrower set of actions available to verified co-hosts.
Control
Public-photo minimization
A public share link exposes the selected photo and limited presentation details, not the complete event gallery, guest list, or management settings.
Control
Guest moderation
Hosts can approve, hide, remove, kick, block, and later unblock guests without automatically deleting the guest’s prior event media.
Control
Server-validated write gateways
Sensitive social and management writes are routed through backend functions that load the real event and derive authority server-side.
Control
Operational safeguards
Upload pausing, approval queues, local image moderation, audit-oriented functions, and explicit session checks reduce event-day risk.
Security testing is part of release acceptance.
GatherSnaps uses a two-account access test, source-code verification, production builds, and route-level reviews. Performance and capacity claims are withheld until they are demonstrated.