Privacy Policy

1. Who We Are

This website is a private, non-commercial project run by us - the people wearing the QR-code t-shirts you scanned - to collect photos taken with us at Tomorrowland 2026 (Boom, Belgium). You can reach us at support@photobomber.xyz.

This is a personal fan project. It is not affiliated with, endorsed by, or connected to Tomorrowland or its organizers in any way.

2. Data We Collect

• Photos: the images you choose to upload.
• Technical data: IP address, basic browser details, and essential cookies needed for the site to work.

3. How We Use Your Data

• To store your photos privately so we can keep them as memories of the festival.
• To show an anonymous count of how many photos have been shared.
• To keep the site working and secure (for example, via cookies).

4. Legal Basis

• Consent: you consent to your upload when you share a photo.
• Legitimate interest: technical data for site functionality and security.

5. Data Storage and Security

Your photos are stored on a secure server and are accessible only to us. The site is served over HTTPS. Uploaded photos are private: they are not published or shown to other visitors. We keep them for our personal use and will delete them on request.

6. Your GDPR Rights

As an EU user, you can:

• Access, correct, or delete your data.
• Restrict or object to processing.
• Request data portability.

Email support@photobomber.xyz to exercise these rights. We will respond within 30 days.

7. Cookies

We use only essential cookies for site functionality (for example, to authorize your upload). No tracking or analytics cookies are used.

8. Data Sharing

We do not share your data with third parties, except where required by law. Your photos stay between you and us.

9. Data Breach

If a breach occurs, we will notify affected users and the relevant Data Protection Authority within 72 hours, as required by GDPR.

10. Contact

Questions? Email support@photobomber.xyz.

Last updated: 13 July 2026