Who we are
SaveTheDates (savethedates.co.uk) is run by Ross Meikle in the United Kingdom, who is the data controller for the information described here. Contact us about privacy at hello@savethedates.co.uk.
If you create an account
- Account: your email address and a securely hashed password. We use them to sign you in and to send account emails such as confirmation and password reset links.
- Google sign-in: if you choose Continue with Google, Google shares your name, email address and profile picture link with us. Our sign-in provider stores these with your account; the app itself uses only your email address.
- Your wedding site: the names, date, location, message, photo, wedding details, theme and settings you enter. Photos are re-saved when you upload them, which removes hidden data such as camera location.
- Guest list and table plan: if you use them, the names, groups and RSVP statuses you add for your guests, and your tables and seating. Only you can see them. Add only what you need to plan your day.
- Payment: when you pay, Stripe collects your card details. We never see or store your card number. We keep a record of the payment (amount, date and Stripe references) to know that your site is paid for and to handle refunds.
- Technical data: like any website, our hosting and sign-in providers record technical details such as your IP address, browser and the pages you request, to keep the service secure and working.
We use this information to provide the service you asked for (our contract with you), and payment records also to meet tax and accounting law.
If you are a guest
When you reply to an RSVP, we store the name you enter, whether you are attending and when you replied. Our hosting provider also records technical details such as your IP address. Only the couple can see replies. We keep them for the couple, who decide what to do with them. Guests don’t need an account and we don’t ask for contact details.
The couple may also add your name to their private guest list and table plan. Only the couple can see these, and they’re deleted with the couple’s account.
If you’re attending, the couple may ask you to choose your meal, and you can tell them your food preferences, such as vegetarian or gluten-free. Food preferences are optional. Only the couple can see these answers, and they’re deleted with the rest of the replies.
Wedding pages open for anyone who has the couple’s link. They are marked not to appear in search results, but they are not password-protected.
Who helps us run the service
We share information only with providers that run parts of the service for us, under their data processing terms:
- Supabase — database, sign-in and photo storage (Frankfurt, Germany).
- Render — hosting the website (Frankfurt, Germany).
- Stripe — payments.
- Resend — sending account emails (Ireland).
- Sentry — error reports that help us fix problems (Germany). A report identifies an account only by a random ID. We remove guest links, form contents and passwords first, and Sentry is set not to store IP addresses.
- Umami — counts visits to our public pages, such as the home page, without cookies. It never sees wedding pages, guest links or your account pages.
If you use Continue with Google, Google handles your sign-in under its own privacy policy.
Some of these providers may handle data outside the UK. Where they do, the transfer is protected by safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK–US data bridge. We don’t sell your information or use it for advertising.
Cookies
We use only cookies needed for the site to work: a sign-in cookie that keeps you signed in, and a cookie that protects Google sign-in and is removed when sign-in finishes. We don’t use analytics or advertising cookies; our visit counts work without them. Stripe’s checkout page sets its own cookies to prevent fraud.
How long we keep it
- Your account and wedding site stay until you ask us to delete them. When your published site period ends, guests can no longer open it, but your private draft and replies stay in your account.
- When you ask us to delete your account, we delete your account, wedding site, photos, guest replies, guest list, table plan and our copy of your payment records. Stripe keeps its own payment records for as long as the law requires.
- Server logs are kept for up to 30 days, and error reports for up to 90 days.
Your rights
You can ask for a copy of your information, or ask us to correct, delete, or stop or limit using it. You can also object to how we use it. Email hello@savethedates.co.uk from the address on your account and we will reply within one month.
If you are unhappy with how we handle your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Security and age
Connections are encrypted, and each couple can reach only their own site and replies. SaveTheDates is for adults aged 18 or over. If we change this notice, we will update the date at the top.