Photo booths
that feel premium.

Windows kiosk software for events. Four capture modes, four guest-facing UIs, multi-brand camera support, AI-edited backgrounds, and a privacy story that holds up to your client's legal team.

net8.0-windows · DPAPI secrets · DPAPI-encrypted credentials · GDPR / CCPA / BIPA aware

What you get

Four guest UIs out of the box.

Per-event configurable. The kiosk reads event.json at startup and renders whichever style matches the room.

ButtonGrid

Classic photobooth. Operator places buttons in the visual editor; touch zones are pixel-perfect.

WheelPicker

Horizontal swipe carousel. Center item scales up and gets full opacity; auto-wraps at edges.

StackedCards

Vertical list with descriptions. Accessibility-friendly — readable from across the room.

CoverFlow

iOS-style 3D-ish rotating carousel on a dark gradient with a pink-glow center card. Premium events.

Capture

Photo. Boomerang. GIF. AI background.

All four modes go through one pipeline. Boomerang and GIF use FFmpeg server-side (bundled in the installer). AI background routes the photo through OpenAI gpt-image-1 or Google Gemini 2.5 Flash Image — operator chooses, per preset.

Camera abstraction

One ICameraService interface; three implementations — Canon EDSDK, Sony Camera Remote SDK, OpenCvSharp webcam. Picked per event with optional fallback. The webcam service falls back to synthetic frames if no hardware is attached, so dev / CI runs without a DSLR.

AI subject preservation

Delegated to the provider's image-edit endpoint — no local segmentation, no mask compositor to drift. Operator-authored prompts can pull guest input fields (jersey number, name) via {fieldId} tokens.

Privacy + compliance

An audit trail your legal team can read.

Three independent on-disk streams under %LOCALAPPDATA%: scrubbed Serilog logs, append-only JSONL audit trail, opt-in counter telemetry. Consent decisions, admin sign-ins, PIN changes, API-key rotations, retention purges, and R2 deletes all land in the audit log. Keep it indefinitely; it's tiny.

DPAPI
Encrypted secrets at rest
JSONL
Daily-rotated audit log
15 min
Default presigned URL TTL

Ready when you are.

Production-grade Windows installer via Velopack. Background auto-update that never restarts the booth mid-session — new bits apply on the next cold start.