Privacy policy

In short: we only keep what we need to make your card work. We don't sell your data, and we don't message your guests.

Last updated: 14 October 2026

What we collect

  • Your account: your name, mobile number, email (if you add one) and password. Your password is stored in a scrambled form (hashed), so even we can't read it.
  • Your invitation: the names, dates, times, venues, words and designs you put on your card.
  • Your guests: the guest names and mobile numbers you add, and their replies (yes, can't come, not sure, how many people).
  • Security data: the IP address of a device, kept for a short time, to stop password guessing and spam.
  • Visits to our public pages: we use Google Analytics and Microsoft Clarity on our public pages (like the home page and template pages) to see which pages are useful. They use cookies. They are not used on guest cards or inside your account.

How we use it

  • To show your card to your guests, collect their replies and show the totals on your dashboard.
  • To let you log in, and to send a password reset email when you ask for one.
  • To reply when you contact us.
  • To keep the website safe and working.

We do not sell or rent your data, we do not show ads, and we do not send messages to your guests. You send the cards yourself from your own WhatsApp.

Who can see what

  • Each guest link is private and hard to guess. A guest only sees their own card and the events they are invited to. They don't see other guests.
  • Only you (logged in) can see your guest list and replies.
  • Guest cards are hidden from Google and other search engines.

Your guests' information

When you add guests, please only add people you are really inviting. Their numbers are used only to open WhatsApp on your phone with the message ready.

Cookies

We use one cookie to keep you logged in. On public pages, Google Analytics and Microsoft Clarity also set cookies to count visits. You can delete cookies in your browser at any time.

How long we keep it

We keep your account and invitations until you ask us to delete them. Security data (like IP addresses for login limits) is deleted after about a day.

Delete your data

You can remove guests and events yourself at any time. To delete your whole account and all its invitations, send us a message from your account's mobile number or email, and we will delete it.

Security

The website uses HTTPS, passwords are hashed, and we limit login tries. No website is 100% safe, but we work hard to protect your information.

Changes

If we change this policy, we will update this page and the date at the top.

Contact

Questions about privacy? Contact us.