Privacy notice

When a couple creates a card they are the host. When a guest replies or signs the guestbook they are a guest. The host decides what appears on the card; we only store it and show it to the people the host shares the link with.

• Everything you type into the card builder — names, event details, your message, dress code and gift details.
• Photos you upload, stored with a content-based filename.
• An email address, only if you choose to provide one so we can send your manage link.

The link that lets you manage your card is a secret credential. Keep it private — anyone who holds it can edit the card and read guest replies.

• Name and WhatsApp number — needed so the couple can reach you about attendance.
• RSVP answers — whether you are coming, how many seats you need, which side you are on, meal preference, and any note you write.
• Guestbook name and message, if the card has a guestbook enabled.

We do not store your IP address. We keep a salted one-way hash of it purely for rate limiting and to spot abuse, and it cannot be reversed into an address. We set no advertising or tracking cookies.

• The host can see every RSVP and guestbook entry, including phone numbers. That is the point of the feature.
• Other guests can see your name and message in the guestbook. They cannot see your phone number, your RSVP answers or how many seats you claimed.
• Your RSVP answers are never shown on the public card. Only the host sees them, in their dashboard.

If the host switches on approval, your note stays hidden until they approve it. Hidden notes are visible only to the host.

Card content, RSVPs and guestbook entries are kept while the card exists. When a host deletes their card, all of its RSVPs and guestbook entries are deleted with it in the same operation — there is no separate archive.

Card data is stored in a hosted Postgres database. Uploaded photos are served from the application itself. If the operator has configured an email provider, your email address is passed to that provider solely to deliver your manage link. We never sell data and we do not run third-party analytics or ad trackers on guest pages.

Under Malaysia's PDPA you may ask to see, correct or delete the personal data held about you. If you are a guest, the quickest route is to ask the couple, who control the card — they can delete your entry from their dashboard. For anything else, contact the site operator.

This service is intended for adults arranging a wedding. We do not knowingly collect data from children.