Privacy Policy

For your account-level data (invitation content, contact details) we are the controller. For the guest list a host uploads, the host decides whom to invite and why; we process that list on the host's behalf and only to deliver the invitation features. Contact: the contact option on our website.

• Hosts: invitation content (names, date, venue, photos you upload) and optional contact details (name, email, phone).
• Guests (entered by the host): name or form of address, optional phone number and group label; when and how often the invitation was opened; RSVP answer, number of attendees and message; door check-in time if used.
• We do not receive card numbers, and we do not collect location or contacts. Advertising identifiers are only used by our ad partners on our own pages (never on guest invitations), and in the EEA/UK only with your consent.

• To provide the service you asked for: showing each guest their personal invitation, RSVP, open tracking, check-in — performance of a contract (Art. 6(1)(b) GDPR).
• To keep the service secure, prevent abuse and fix errors — our legitimate interests (Art. 6(1)(f)).
• To keep accounting records — legal obligation (Art. 6(1)(c)).
• Analytics and advertising cookies on our pages — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Each guest can only see their own invitation and reply, through a personal link with a random code. The guest list, opens and replies are visible only to whoever holds the host's private management link — keep it like a password. Invitation images with QR codes are generated on the host's device and are not uploaded.

We never sell or rent guest data, never use it for advertising, and never show ads inside invitations sent to guests. We use a small number of service providers (processors) under data processing terms: our hosting provider and Cloudflare (content delivery and file storage). Banner ads on our pages are served by advertising networks (such as Google AdSense) that act as independent controllers for their own cookies; see the cookie section below.

Our team and servers may be located outside the European Economic Area, including in Vietnam. Where personal data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses with our providers.

• Invitations expire 90 days after the event date (or one year after creation if no event date was set). The guest list and the host's contact details are then deleted automatically, and the invitation goes offline.
• Guestbook messages and signatures, gift records, seating, wishlists, funds, polls, draws and plans are deleted together with the guest list.
• Hosts can delete any guest at any time; that guest's link stops working immediately.

Depending on where you live, you can ask to access, correct, delete, restrict or export your data, object to processing, and withdraw consent. Guests may contact the host or us directly at the contact option on our website; we will respond within one month. You can also complain to your local data protection authority.

Strictly necessary: remembering your message template or cookie choice in your browser's local storage, and a secure session cookie for our staff area. Guest invitation pages never set advertising or analytics cookies.

Optional: analytics and advertising cookies set by us and our ad partners on our own pages (home page, gallery, editor) to measure traffic and show the banner ads that keep the service free. In the EEA, UK and Switzerland these run only after you choose "Accept all"; elsewhere you can opt out the same way. You can change your choice at any time:

Some images, animations and music in our designs are created with artificial intelligence and labelled as such. We do not use hosts' or guests' personal data to train or prompt AI models.

The service is intended for adults organising events. We do not knowingly collect data from children under 16 as hosts.

Guest codes and management links are long random strings, data is encrypted in transit (HTTPS), and management pages are excluded from search engines. If a breach affects you, we will notify you and the competent authority as required by law. We may update this policy; the date at the top shows the latest version.