Privacy policy

01What we store

Your account

When you sign up we store your name and email address. If you sign in with Google we also receive the profile picture Google provides. Passwords are never stored in readable form — we keep only a hash.

Each sign-in creates a session record holding its expiry, the IP address and the browser user-agent string. That record keeps you signed in and lets us spot access that does not look like you.

Invitation content

Everything you type into an invitation is stored: the names of the couple, both sets of parents, dates and times, venues, your message to guests, the photo album, the background music, and the bank details for wedding gifts if you turn that on. We store it to show your guests, and for nothing else.

Your guest list

The guest list is whatever you type or import. Each guest has a display name, a form of address, a group, a table number and the person who invited them. We also record when a guest first opened the invitation, so you know the link arrived.

The guest list has no phone number field and no email field. That is a design decision rather than an oversight: the service does not need either one to work, so it does not ask for them.

Guest replies

A guest says whether they are coming, how many people they bring, and answers any extra questions you added. Guests who arrive through the shared link type their own name. Wishes are stored together with the name of whoever wrote them.

With each reply we store a hash of the IP address, never the address itself. The hash exists to block spam. It is salted with a server-side secret, so no lookup table can reverse it.

Photos and music you upload

Every uploaded photo is re-encoded before it is stored. That strips the EXIF data it arrived with, including GPS coordinates — wedding photos taken at home routinely carry the exact location of the family house. What sits on our servers is the cleaned copy, with no original metadata left.

Audio files are stored in their original format. If your music file carries tags you would rather not share, remove them before uploading.

02What we refuse to store

• Card numbers. We accept bank transfers only. There is no card field anywhere on the site, so there is nothing to leak.
• Guest IP addresses. Only the hash is kept.
• Guest phone numbers and email addresses. The service never asks for them.

03What we use the data for

• Showing your invitation to your guests, each one addressed by their own name.
• Counting confirmed guests, extra seats and the number of tables you need to book.
• Signing you in and keeping your session alive.
• Matching payments and opening invitations.
• Blocking spam and abuse of server resources.
• Sending two kinds of email: address verification and password reset.

We do not sell data, and we never share your guest list with third parties for advertising.

04Payments

You transfer money to our bank account, usually by scanning a VietQR code. Our reconciliation partner notifies us when the balance changes, the system reads the reference code from the transfer note, matches it to your order and opens the invitation.

We store the amount, the bank transaction id, the transfer note and the time of the match. We never see or store your online banking credentials. The payment policy describes the money flow in detail.

05Your invitation stays out of search engines

Every invitation page carries a noindex tag and appears in no sitemap. Signed-in areas — your invitation list, the editor, the checkout page — are blocked in robots.txt.

In practice: nobody finds your invitation through Google without the link. But the link itself is the key — anyone holding it can open the page. Treat it like your home address and send it only to the people you are inviting.

06Who else touches the data

A handful of providers keep the service running:

• The server and database provider, where the data physically lives.
• An object storage service for photos and music.
• The partner that reports incoming bank transfers.
• Google, and only if you choose to sign in with a Google account.
• A transactional email provider, for the two kinds of email named in section 3.

Each one receives the minimum it needs to do its job. Beyond that, we disclose data when a competent state authority makes a lawful request.

07How long we keep it

• Paid invitations: kept until you ask us to delete them. You paid for the page to stay up, so we do not tidy it away.
• Drafts that were never opened: kept for as long as your account exists, and removed together with it.
• Payment records: kept for the period accounting law requires, including after the account itself is deleted.

08Your rights

• Access and correction. Invitation content and guest lists are editable at any time in the editor.
• Partial deletion. Remove a guest, a wish or a photo directly from the dashboard.
• Account deletion. Email us from your registered address at [email protected]. Once we verify it, we delete the account, the invitations, the guest lists, the replies and the uploaded files within 7 working days. Payment records are retained under section 7.
• Withdrawal of consent. You may stop using the service and request deletion whenever you like.

Account deletion cannot be undone. Invitation links you already sent to guests will stop opening.

09Cookies

We set cookies for exactly one purpose: keeping you signed in. Your light or dark preference lives in browser storage and is never sent to the server. No advertising cookies, no third-party ad network trackers.

10What the invitation owner is responsible for

A guest list is other people’s personal data, entered by you. You are responsible for having the right to use it. We process that data on your behalf and according to the actions you take in the product.

11Changes to this policy

When the text changes, the date at the top of the page changes with it. The new version applies from the day it is published, so it is worth re-reading this page before you pay.

12Contact

For anything concerning your data, email [email protected] or go through the support centre. Details of the operating company are on the company information page.