Privacy policy
As of November 2026
1. Controller
2. What we process and why
- Visiting the website: the server processes technically necessary data (IP address, time, page requested, browser) in server logs to deliver the site and keep it secure (Art. 6(1)(f) GDPR). Fonts and images are served from our own server; no tracking or advertising services are used.
- Account: name, email address, password (hash only), account type (couple/planner), optional company, language. Purpose: providing your account and the planning features (Art. 6(1)(b) GDPR).
- Wedding data: names, date, budget and expenses, vendors and venues, tasks, schedule, and guests (names, RSVP status, table, meal choice and dietary notes such as vegetarian or allergies). Purpose: providing the planning features (Art. 6(1)(b) GDPR). Dietary notes can be health data; please only enter them if the people concerned agree.
- RSVP page for guests: guests who open an invitation link from the couple can enter, without an account, whether they attend, meal choices, dietary information (possibly health data, Art. 9 GDPR) and a message. These details are visible to the couple and their planner, who are responsible for them; we process them on their behalf. Consent is given by voluntarily submitting. The page only sets technically necessary cookies and is not indexed by search engines.
- Emails to guests and summaries: if the couple or planner stores a guest's email address, we send, on their behalf, the invitation and (at most three) reminders with the personal RSVP link. Guests can stop this with one click in any mail, which deletes the address. Couple and planner get at most one summary of new replies per day, which can be switched off in the settings or via the link in the mail.
- Wedding website and photo album: if the couple publishes a website we show the content they entered (names, date, texts, photos), optionally behind a password. Guests can upload photos and give a name with them; we store the pictures privately on our servers, strip all metadata (such as location) and serve them only to people who may view the website. Uploaded pictures appear only after the couple approved them, if they chose so. The couple is responsible for the content and can delete photos at any time. The website is not indexed by search engines. The personal link from the invitation also sets a session cookie that remembers the access. Pictures are deleted together with the wedding. The couple can also email news posts to invitations with an address on file; every mail contains a link that deletes the address.
- Collaboration: when you invite a partner or planner by email we process their email address to send the invitation.
- Emails: invitations, password resets, sign-in links and payment confirmations are sent through an email service provider (Art. 6(1)(b) GDPR).
- Payment (Pro): payments are handled by Mollie B.V. (Keizersgracht 126, 1015 CW Amsterdam, Netherlands) or Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland), depending on the payment provider you choose at checkout. We pass on name, email address, amount and purpose; card or bank details are entered only with the payment provider you chose. We store which payment was made when and for what amount, and keep this for up to ten years because of commercial and tax retention duties (Art. 6(1)(b) and (c) GDPR).
- Waiting list: with your consent we store your email address and the couple/planner choice and send a confirmation email (double opt-in) and one message at launch (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the link in the email or by writing to us.
3. Cookies
We only set technically necessary cookies: a session cookie (sign-in, language), a security cookie against form abuse (CSRF) and, if you choose “Keep me signed in”, a sign-in cookie. These need no consent (§ 25(2) TDDDG), so there is no cookie banner.
4. Recipients and processors
Hosting, email delivery and Mollie B.V. or Stripe Payments Europe, Ltd. (payment). Providers processing data on our behalf are bound by contracts under Art. 28 GDPR. Data is only transferred to third countries where an adequate level of protection or suitable safeguards exist.
5. Planners and client data
If a planner enters data of their clients (e.g. guest lists), the planner is responsible for it and we process it on their behalf. Planners conclude a data processing agreement under Art. 28 GDPR with us; please contact us for it.
6. Retention
We keep your data as long as your account exists. You can delete your account yourself under “Wedding settings”; weddings nobody else uses are deleted with all their data, shared weddings pass to the other members. Payment records stay, without link to your account, for the legal period. Server logs are deleted after a short time.
7. Your rights
You have the right of access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interests, and the right to withdraw consent at any time with effect for the future. Write to . You may also complain to a data protection supervisory authority.