Privacy
What we collect, why, and how to get rid of it. Last updated September 2026.
The short version
We store what you type in so the planner works, and nothing else. There are no advertising trackers, no analytics scripts, and no third party buying or selling what you do here. We send email through one provider and keep encrypted backups with another. You can have all of it deleted by asking.
Two different relationships
This matters more than it sounds, because it decides who is responsible for what.
If you signed up, we hold your account — your email address and your name — and we are responsible for it directly.
If someone added you to their guest list, the couple planning that wedding decides what to record about you. They are responsible for that information; we store and process it for them, on their instruction. If you want your details changed or removed from a guest list, ask the couple first — they can do it immediately. If you cannot reach them, contact us and we will help.
What we hold
If you have an account
Your email address, the name you give us, and the times you signed in. Sign-in is by emailed link, so we never hold a password. Everything you put into your plan — dates, venues, budget figures, checklists, vendor contacts, contract files you upload, and your wedding website content.
If you are a guest
Whatever the couple entered or you submitted when you replied: your name, and possibly your email, phone number, postal address, whether you are an adult or child, who you are attending with, your reply, and any notes about meals, allergies, access needs or messages you left.
Some of that can be sensitive — a dietary requirement can reveal a health condition or a religion, and an access note can reveal a disability. We store those fields because caterers and venues need them, we do not use them for anything else, and they are visible only to the couple and anyone they have explicitly given access to.
Photographs
Images you upload are re-encoded on arrival, which removes the embedded metadata cameras attach — including the GPS coordinates of where the photo was taken. We do that automatically, for everyone, because a photograph taken at home otherwise publishes a home address.
Cookies
We set two, both strictly necessary for the site to function. There are no advertising, analytics or cross-site tracking cookies, which is why you are not being asked to accept anything.
| Cookie | What it does | How long |
|---|---|---|
| Session cookie | Keeps you signed in after you click a magic link | Until you sign out, or 30 days |
| ws_… (wedding site access) | Remembers that you entered the code for a private wedding website, so you are not asked on every page | 180 days |
Who else sees it
Only the companies we need to run the service. We do not sell data, and we do not share it for advertising.
| Company | What for | What they see |
|---|---|---|
| OVHcloud | Hosting | Everything — the server this runs on |
| Resend | Email delivery | Email address and message content for sign-in links and invitations |
| Backblaze B2 | Encrypted off-site backups | Encrypted copies of the database and uploaded files |
| Cloudflare | DNS only | Domain lookups. Traffic is not proxied through Cloudflare |
Where a couple has added links to outside sites — a registry, a hotel, a map — opening those links takes you to that company, and what they do is covered by their own policies.
How long we keep it
For as long as your account exists, plus up to 30 days after you delete it, and up to 90 days in encrypted backups before those rotate out. Backups exist so that a mistake or a failed disk does not lose your wedding; they are not searched or used for anything else.
What you can ask for
A copy of what we hold, a correction, or deletion. Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to a data protection authority. We will not charge you or make it difficult, and we will not treat you differently for asking.
Email privacy@rspill.com. We aim to respond within 30 days. If you are asking about a guest list you appear on, tell us which wedding, because we may need to involve the couple who control it.
You can also export your own guest list and responses as a spreadsheet at any time from the RSVP responses page, without asking us.
Children
Accounts are for adults. Guest lists often include children, because weddings do — a child’s name and age group may be recorded by the couple inviting them, on the same basis as any other guest. We do not knowingly let anyone under 13 create an account.
Security
Traffic is encrypted in transit. Backups are encrypted before they leave the server. Wedding websites are private until published and are not listed on search engines unless the couple switches that on. Contract files are only reachable by people signed in with access to that wedding.
This is early software run by a small operation. We think it is built carefully, and we are telling you plainly rather than claiming a level of assurance we have not been audited for.
Changes
If this changes in a way that matters, we will say so on the site rather than quietly swapping the page. Continued use after a change means you accept it.
Questions: privacy@rspill.com. See also the terms.