Privacy Policy

Last updated: draft, not yet reviewed by counsel.

What we collect

We collect the email address you sign up with, the content of the invitation you build (text, photos, dates, and similar), and the RSVP data your guests submit on your invitation's guest page. Guest RSVP data belongs to you, the customer — we process it on your behalf so you can see who is coming.

Guest pages set zero cookies

A guest visiting your invitation link sets no cookies and makes no third-party requests on page load, full stop. There is no tracking pixel, no analytics script, and no ad network watching your guests. Page views and unique visitors are counted entirely server-side, using a daily-rotating anonymous hash — never a cookie, never a persistent identifier. The only cookie a guest device ever receives is set at the moment they submit an RSVP, so they can edit their own response afterward.

Photos

EXIF metadata — which can include the location a photo was taken — is stripped from every photo you upload before it is stored.

Who processes data on our behalf

We use a small number of processors to run the service: Supabase (database and file storage), Paddle (payments), Resend (transactional email), Cloudflare (hosting and edge network), Sentry (error monitoring), and PostHog (host-side product analytics only — never running on guest pages). We do not sell your data, or your guests' data, to anyone.

Deletion

You can request deletion of your account and its data at any time by contacting our support address.

Governing law

This policy is governed by the laws of [Jurisdiction].