Privacy Policy
How we collect, use, and protect your personal information.
Last updated: 2026-05-21
How we collect, use, and protect your personal information.
Last updated: 2026-05-21
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.
We collect the following types of information to provide and improve our service:
If you use the online wedding RSVP, there are two kinds of people: the host, who has an account, and guests, who do not.
What is stored. For each RSVP page, the host's account stores the title, and any date, place, welcome note, reply-by date, meal choices and settings the host entered. For each guest reply, we store the guest's name, whether they are coming, the number of people in their party, and the time the reply was sent. If the host turned these questions on, we also store the guest's meal choice, email address, dietary needs and note. A guest's IP address is not stored with their reply. To limit spam, we keep a keyed one-way code derived from the network address of the connection that sends a reply, never the address itself, together with the page and an hourly count of replies per connection and per page. These hourly counters are not deleted when a reply or an RSVP page is deleted.
Who can see replies. Only the signed-in host who owns the RSVP page can see its replies. Guests see only the details the host wrote for the page. Anyone who has a page's link can open the page and send a reply.
No messages. We do not send emails or text messages to guests or hosts from the RSVP tool.
Deleting data. A host can delete a single reply, all replies to a page at once, or the whole RSVP page. Deleting a page deletes the page and all of its replies. The hourly spam counters described above are not deleted with a page or its replies.
If you build a wedding website, the host has an account and guests do not.
What is stored. For each website, the host's account stores the address (the part after /w/), the style, and everything the host typed into the sections: names, date, city, greeting, story, schedule, travel notes, links, questions and answers, and the descriptions of photos. The website keeps a draft and, once published, a separate published copy. Uploaded photos are checked, stripped of location, camera and time details, and stored under a random address; we keep the file type, size and dimensions. If the host sets a guest passcode, we keep only a salted, slow one-way hash of it, never the passcode itself. We record which acceptable-use statement the host accepted and when. Replies to the RSVP form on a website are stored as described under RSVP Data.
Who can see it. Anyone who has the address can see the published copy, unless the host set a passcode, in which case nothing is shown until the passcode is entered. A draft is visible only to the host. A website is not listed in our sitemap and asks search engines not to list it, unless the host turns on search-engine visibility and has no passcode. We do not load analytics or other third-party scripts on wedding website pages.
Reports. Anyone who can see a website can report it. A report stores the reason, an optional note of up to 300 characters, the time, and a keyed one-way code derived from the reporter's network address (never the address itself) so that one network counts once. Reports are visible to our administrators. To limit abuse we also keep hourly and daily counters per connection and per website, such as for passcode tries, reports, uploads and newly published sites. These counters are not deleted with a website.
Deleting data. A host can delete a photo, take the website offline, or delete the website. Deleting a photo or a website removes it and its photos at once. The host can choose to delete the RSVP page and its replies in the same step. After a website is deleted or its address is changed, the old address is kept out of use for 30 days, which stores only the address and the account that held it.
We use the data we collect to:
We do not sell your personal information. We may share data only in these limited cases:
We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.
You have the right to access, update, export, or delete your personal information. You can do this through your account settings or by contacting us at the email address below.
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.
If you have questions about this Privacy Policy, please contact us at the email address provided on our website.