Privacy Policy
All the legal stuff ✨
Our data privacy philosophy
We collect what the service needs to work and nothing for advertising.
What information do we collect?
Your email address and display name; the profile details you add (photo, bio, social usernames); events, RSVPs, comments, photos, cards and messages you create; and technical data needed to keep you signed in.
Why do we use it?
To run the service: sign you in, show your events and guest lists to the right people, send the notifications you've enabled, and keep the service safe.
Who can see it?
Hosts see their guests' names, RSVPs and answers to questions. Guests see what the host's privacy settings allow. Public events and profiles are visible to anyone. Private events are only reachable by link, and password-protected events also need the password.
Cookies and advertising
We use first-party cookies to keep you signed in and remember the profile you're acting as. We don't use advertising or analytics cookies, and we don't sell or share personal information for advertising.
How long do we keep it?
Until you delete it. Deleting your account permanently removes your profile, the events you host, your RSVPs, comments, photos, cards and messages.
How do we protect it?
Data is stored with Supabase. Access to rows is limited by database policies, uploads are stored in access-controlled buckets, and secrets are kept out of the code.
Your choices
Edit your profile, change notification settings, block people, export a guest list you host, and delete your account from Profile Settings.
Draft status
This policy is a plain-language draft and is pending legal review.