Step 1 · Before the day — roster and consent
The camp brings its camper roster — the same roster its registration system already holds — and a per-camper consent request goes to each parent. A parent grants or declines whether their camper may be photographed and whether the family wants to order. Facial recognition is off by default. The photographer sees a consent roster before the shoot, so an un-consented camper is known at the name level, not discovered afterward. Consent-gated capture is built and live.