Privacy policy.

The short version

We hold your email address, the invitation you wrote, and the replies your guests leave on it. We do not sell any of it, we do not advertise, and we do not track anybody around the internet.

There is no advertising network anywhere on this site, no tracking pixel in any email we send, and no consent banner, because there is nothing to consent to.

What we hold about you

An account is an email address and nothing else. There is no password to store, because signing in is a five digit code sent to your inbox.

• Your email address, so that you can sign in and so we can write to you about your own invitation
• The invitation itself: the names, the date, the place, your own words, your design choices and your photograph if you upload one
• Your payment record: the amount, the date and the reference. We never see or store your card
• The guest addresses you send to, so the sending panel can show you who has it and who bounced

What your guests hand over

A guest who replies gives their name, whether they are coming, how many are in their party, and anything you asked for such as dietary needs or the names of everybody attending. That goes to you, on your own private page, and nowhere else.

A guest does not need an account, is never asked for a password, and is never followed anywhere after they close the invitation.

How we count opens without identifying anybody

Your private page shows how many people have opened your invitation. That number is deliberately built so that it cannot be turned back into a person.

When an invitation is opened we store a one way fingerprint made from the visitor, the invitation and the day, and nothing else. No address and no device information is kept. The fingerprint is worthless the following day, which is exactly why the same person counts once for reach today and not at all tomorrow.

Link preview fetchers are filtered out so they never inflate your count, and the sample invitations on this site are never counted at all.

Cookies, and how few there are

One cookie, and it is the one that keeps you signed in. It holds a session token, not your address, it cannot be read by scripts in the page, and it expires by itself.

The site also remembers two small things in your own browser rather than on our servers: whether you appeared to be signed in last time, so the header can print the right word before the answer arrives, and whether you have already seen the envelope open in this session. Neither one leaves your device and neither one identifies you.

Visitor numbers for the site itself are counted without cookies, which is why you have never been asked to agree to any.

Who else touches it

Only the companies that are actually needed to run this, and only for their one job.

• A payment provider takes the payment and holds the card details. We receive the amount, the date and a reference, never the card
• An email provider delivers the sign in codes, your receipts and the invitations you send to your guests
• Our hosting and storage provider runs the site, the database and the photographs you upload

A photograph is public, and should be treated as such

An invitation is meant to be opened by a hundred people who were sent a link, so it is reachable by anybody holding that link. A photograph you upload sits on a public address for the same reason.

It is not indexed: every real invitation tells search engines to leave it alone and is deliberately left out of the sitemap, so it will not turn up in a search for your own names. But a link that is forwarded can be opened, which is worth knowing before you write something on it that you would not want a stranger to read.

The guest list is yours, and it is your responsibility

When you paste guest addresses in to send your invitation, you are asking us to send on your behalf, to people who know you. Use it for that. Please do not paste in a list of people who did not expect to hear from you.

How long we keep it

Your invitation and its replies stay for as long as you want them. Nothing is deleted automatically, not even when a free invitation goes quiet: the link stops working, the words and the replies stay exactly where they were, and paying puts it straight back.

When you delete an invitation, its replies, its guest list and its statistics go with it. Payment records are kept for as long as tax and accounting rules require, because that is not ours to delete.

What you can ask for

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete your account and everything attached to it. Write to us from the address on the account and we will do it.

Children

This is a product for people planning their own day and is not intended for children. We do not knowingly collect anything from a child.

Changes, and getting in touch

If this policy changes in a way that matters, the date at the top of this page changes with it. Questions about any of it come to the same inbox as everything else.