Privacy Policy
Last updated September 2026
What we collect
From you, when you buy: your name, email address, and a password we store only as a hash — we cannot read it.
From you, as you build your card: whatever you enter — names, dates, venues, family contacts, photos — and your guest list, including guest names and any phone numbers you add.
If you try a design before buying: the names, functions and dates you type, and the email address and WhatsApp number you give us, so we can show you your card and get in touch about it. This is kept as a draft tied to a cookie in your browser (a random code, not your name), so you can close the page and pick up where you left off. No account is made and nothing is published. We may reach you on WhatsApp or by email about the card you tried.
From your payment: you pay by bank transfer, so we keep the amount, currency and status, and the proof you send us — the receipt picture or the transaction ID, and the WhatsApp number we confirm on. We do not take card payments and never ask for a card number.
Automatically: standard server logs, and a session cookie that keeps you signed in. We do not run advertising trackers on the invitation cards themselves.
Cookies & advertising
On our marketing pages and shop — never on a published invitation card — we use Google Analytics to see which pages are visited, and the Meta (Facebook/Instagram) Pixel to measure the ads that brought you here and to show you relevant ads afterwards. Both set cookies and both are run by their own provider under its own privacy policy: Google's and Meta's. When a payment is confirmed, our server also tells Meta that a sale happened, with its amount and your email address and phone number in hashed form (scrambled one way, so Meta can match it to an ad it showed you but cannot read it), so we can tell which ads work. You can opt out of Meta's ad targeting in your ad settings, or block both with your browser's cookie or tracker-blocking controls.
Why we hold it
- To provide the card you bought and keep it online for your access period
- To let you sign back in and edit it
- To email you order confirmations and expiry reminders
- To answer you when you contact support
- To keep records of payments, as tax law requires
Your guests
Guest names and phone numbers exist only so your card can greet a guest by name and so you can share a link with them. We do not market to your guests, sell their details, or contact them for our own purposes.
Invitation cards are excluded from search engines, so a guest's name cannot surface in a Google result.
Who we share it with
Only the services needed to run this, each handling one part. They are named rather than described, because “our providers” tells you nothing you could act on:
- Vercel — hosts the website and serves every page
- Supabase — stores your card, your guest list and your photos
- Meta — measures our ads: the Pixel on our shop pages, and a hashed email and phone number when a payment is confirmed (see above)
- Resend — delivers confirmation, reset and reminder emails
- Zoho Mail — receives email you send to our support address
Each is given only what its job needs. We do not sell your data to anyone, ever, and we do not use your guest list for anything except your own card.
How long we keep it
While your card is active, and for a grace period after it expires so you can extend without losing anything. After that we delete the card and its guest list. Payment records are kept longer where tax law requires it.
In practice: an expired card and its guests are deleted 12 months after expiry. An account with no cards is deleted after 24 months of inactivity. Ask us sooner and we will delete it sooner.
A draft from trying a design is deleted 30 days after you last touched it, unless you buy. You can ask us to delete it sooner.
You can ask us to delete your account and everything in it sooner.
Your rights
You can ask us to show you what we hold, correct it, delete it, or send you a copy. Email us and we will act within 30 days.
Security
Passwords are hashed. Access to a card is restricted to the account that owns it. No system is perfectly secure, but we do not hold the most sensitive data at all — we do not take card payments, so there are no card numbers to lose.