Privacy policy
What this application stores
Your account name, email, a hashed password when you use email sign-in, session records, invitation details, photographs, uploaded audio and guest responses are stored to provide the invitation service. Plain-text passwords and raw session tokens are not stored in the database.
Sign in with Google
If you choose Google sign-in, Google shares your name, email address and a unique Google account identifier with us. We use these to create or sign in to your account. We do not receive your Google password or request access to your Gmail, Drive or contacts. Google sign-in does not subscribe you to promotional emails.
A temporary HTTP-only cookie and a sign-in record protect the Google redirect. They expire after ten minutes; the record is removed when used, and expired records are cleaned up on subsequent sign-in attempts. We do not store Google access or refresh tokens.
Orders store your account identity, chosen designs, currency, original prices and payment or credit-redemption status. Reward wallets store daily claims, credits earned and credits spent. Saving an invitation draft is separate from placing an order; publishing a free design also records its free order.
Administration and customer emails
Authorized administrators can view customer accounts, orders and saved invitation details to provide the service. Internal support notes, pricing changes, reward-setting changes and email delivery records are also stored. Guest response forms remain private to the invitation owner.
Promotional email is optional and is not preselected at registration. You can change your choice from Email preferences or use the unsubscribe link in a promotional message. Order-related messages are separate. When email delivery is configured, the selected mail provider processes the recipient address and message content for delivery.
Daily credit claims reset at 00:00 UTC. Credits have no cash value; the required credit amount for a premium design is displayed before redemption. Changes to future prices or rewards do not rewrite completed order prices or earlier credit history.
Journal comments and contact enquiries
Journal comments are linked to your account. Approved comments show your account name and comment publicly; your email address is not shown. Pending comments are visible to you and administrators. You can remove your own comments.
Contact enquiries store your name, email address, subject and message so administrators can respond. Enquiries and internal support notes are not public. Submitting an enquiry does not subscribe you to promotional email.
Who can see an invitation
Anyone with a published invitation link can open it. Share the link only with people you intend to invite. Published pages request that search engines do not index them; this is not a password restriction. Guest responses are available to the invitation owner after sign-in.
Cookies, browser storage and your choices
Invitation owners can see aggregate page views, invitation opens and guest reply totals. Page views include reloads; they do not represent unique guests. A new random page event ID prevents duplicate retry counts and is not saved in browser storage. These invitation counts do not store visitor IP addresses, device identifiers or visitor profiles, and use no analytics cookies. Owner visits and demo previews are excluded.
Essential storage supports sign-in, your cart, currency and privacy choices. The cookie banner lets you accept optional cookies, reject them, or choose analytics and advertising permissions separately. Optional permissions are off until you choose otherwise. We do not currently use analytics or advertising cookies.
Your cookie preferences are saved in this browser’s local storage for 180 days. They are not linked to your account. After that period, or if you clear site data, we ask again. You can change your choice at any time using Cookie settings in the footer.
An HTTP-only session cookie keeps you signed in. Map links open Google Maps. If you add externally hosted photographs or music, a guest’s browser connects to that host when loading the media.
Your cart stores selected design identifiers in this browser’s local storage. Clear the cart or your site data to remove them. The cart does not store account credentials, guest details or payment information.
If your session ends while editing, a temporary copy of your unsaved invitation can be kept in that browser tab. Recovery is available for one hour and requires signing back into the same account. The copy is removed after a successful save, when an expired copy is checked, or when the tab closes. It does not contain passwords or session tokens.
A currency preference is also saved in this browser when you choose USD or PKR. Automatic display uses a proxy country hint when configured, with your browser timezone as a fallback. This site does not request your precise location or send your IP address to a geolocation service. Clearing site data removes your currency preference.
Deleting your content
You can delete an invitation and its responses from your dashboard. Uploaded media and backup copies have a separate retention lifecycle. Keep a copy of any photographs you want to retain.