Photo Delivery & Sharing

Overview

End-users should be able to receive a softcopy of their pictures without making a payment at the booth. Delivery is accomplished via scanning a QR code which points to a hosted download page.

• Softcopy availability is controlled by the tenant's active plan/license. Cloud storage cost is treated as part of the tenant-facing product cost.
• The backend generates signed download URLs and handles the QR code generation.
• The QR directs the phone to a hosted, mobile-friendly completion page.
• Direct file delivery uses R2-backed storage with correct caching/content headers.

Flow: End-User Download (Booth & Mobile Phone)

1. Completion: User finishes their photo session and arrives at the image-final screen at the physical booth.
2. Eligibility Check: The system checks that the booth's tenant license/subscription is active.
3. Fulfillment: If active, the app shows the download QR according to the tenant's configuration. The end-user is never prompted to pay at the booth.
4. Scan: User scans the QR code displayed on the photobooth screen using their own phone.
5. Redirect: User is redirected to the hosted download page.
6. Validation: The page validates the download token and expiry time.
7. Display: If valid, the photo is displayed with a safe preview and download options.
8. Download: User taps to save the image (binary download retrieved behind a signed file endpoint).
9. Expiry: If the link has expired, invalid, missing, or failed, a friendly error state is shown without ambiguity.