Privacy Policy

Who we are

This wedding website is operated by Ruben Cipriano, Sole trader (Empresário em Nome Individual), NIF 264424018, Rua André Vidal de Negreiros, 1950-024 Lisboa, Portugal, contactable at [email protected]. We are the data controller for the personal data described below.

What we collect

• Account data (if you sign in): your name, email, and profile image from your chosen sign-in provider.
• RSVP data: the name, attendance, guest count, dietary notes, and any message you submit. The dietary question is optional to answer, and a couple can switch it off for their wedding entirely — when they do, nothing is stored for it even if it is sent.
• Photos & videos you upload, including any people or metadata they contain.
• Quiz activity: your answers and score, if you play.
• Technical data: IP address and browser user-agent, used only for security, abuse-prevention (rate limiting, hCaptcha), and short-lived logs.
• A record that you were shown this notice: when you send an RSVP or upload a photo, we store the fact that the short notice on that form was on screen, the version of its wording, the time, and your device id (below) or account. It is how we can show that we told you, and it is not linked to a name unless you were signed in.

We do not use advertising or analytics trackers.

Cookies

We use two cookies of our own. token keeps you signed in; it is HttpOnly and expires after 7 days of inactivity. oauth_state exists only while you are signing in, carries a one-time value we check when your provider sends you back, and is deleted as soon as that is done. We also keep one small value in your browser's own storage: wedding_device_id, which stops one device flooding a gallery with uploads and is the id we file the “you were shown the notice” record against. Our CDN (Cloudflare) sets its own short-lived cookies to block bots and abuse, and when the anti-spam check is switched on for the platform, hCaptcha sets cookies on the RSVP form.

Every one of those is needed for something you asked the site to do. We use no analytics, no advertising and no cross-site tracking, which is why you are not asked to accept cookies. If that ever changes, you will be asked first. See the full list, item by item.

One thing worth knowing: if a couple adds a map to their wedding page, the map tiles are loaded from the OpenStreetMap Foundation, which receives your IP address in the process.

Lawful basis

We process account and RSVP data to run the event (legitimate interest / your consent when you submit a form), security data to protect the service (legitimate interest), and — if you purchase a paid feature — payment data to fulfil that contract.

Who processes your data (sub-processors)

• Cloudflare — CDN, DNS and bot protection.
• hCaptcha (Intuition Machines) — anti-spam on the RSVP form, when a couple enables it.
• Brevo — transactional email (EU-based).
• Google / Facebook / GitHub — sign-in, and only the one you choose to use.
• OpenStreetMap Foundation — map tiles, when a couple adds a map. It receives your IP address.
• Stripe — payment processing. Only involved once paid plans go live, and only for the person paying.
• Hetzner Online GmbH — where the service runs and where photos are stored (Germany (EU)).

Some providers are outside the EU; transfers rely on their published Standard Contractual Clauses or adequacy decisions. Site owners can find the processor terms in our data processing agreement.

How long we keep it

Sessions expire after 7 days of inactivity. Security audit logs are kept for up to 180 days. Backups rotate on a 30-day cycle. Photos, RSVPs, and account data are kept until the event organiser removes them or you delete your account. Records of the notices and terms you were shown outlive that on purpose — if we deleted them we could no longer show that past processing was lawful — but on erasure they are stripped of everything that identifies you.

Your rights

You can access, export, correct, or delete your data. Signed-in users can download or delete their data directly — the file includes your account, the site content you wrote, your RSVPs, your photo and quiz records, your consent history, your billing records and the security log of your own actions. Photo and video FILES are not in it; couples download those as a separate archive from their wedding's admin page. You may also contact [email protected], and you have the right to complain to a data-protection authority — in Portugal that is the Comissão Nacional de Proteção de Dados (CNPD), and you may equally complain to the authority where you live or work (Article 77 GDPR).

Uploading photos of others

Please only upload photos and videos you have the right to share. They are visible to event guests. To request removal of an image that includes you, contact [email protected].