Privacy policy

Last updated: 1 January 2027

Who we are

("we", "us") runs , a service that lets event hosts collect written, audio and video messages from guests using a QR code. We are the data controller. Our address is . You can contact us at . We are registered with the Information Commissioner's Office, registration number .

What we collect

From hosts

Your email address, your event name, date and closing time, your chosen plan, and records of your payments. Card details are entered on Stripe's payment page and are never seen or stored by us.

From guests

The name you type, an optional photo, and your written, audio or video message. We also keep a shortened, one-way scrambled version of your connection address for a few minutes' worth of rate limiting, so one connection cannot flood an event. It cannot be turned back into your address. Guests do not create an account and we do not email or contact guests.

How we use it and why

We use hosts' details to run the event, take payment, email the private link and reminders, and keep payment records (contract and legal obligation). We store guests' messages so the host can see them (our legitimate interest in providing the service the host asked for, and the host's own purpose for collecting them). We do not sell data, run advertising, or use analytics or tracking cookies.

Who sees guest messages

Messages are visible to the host who holds the event's private link, and to no one else. The host decides whom to share it with. Hosts are responsible for telling their guests that messages will be collected and who will see them.

How long we keep it

Messages, photos and recordings are deleted 12 months after the event closes, unless the host pays to keep them. Videos are kept for the period the host has paid for. Hosts can delete everything at any time. Payment records are kept for six years for tax purposes. Half-finished uploads are deleted within an hour.

Who we share it with

We use these providers to run the service: Cloudflare (hosting, storage and security checks), Stripe (payments) and Resend (sending email). They process data on our instructions and may do so outside the UK. Where they do, transfers rely on approved safeguards such as the UK addendum to standard contractual clauses or an adequacy arrangement.

Your rights

You can ask to see, correct or delete your data, object to how we use it, or ask us to restrict it. Email us at . If you are a guest, tell us your name and the event so we can find your message. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.

Children

The service is for hosts aged 18 or over. Guests of any age may be invited by their host, and the host is responsible for getting any parental permission needed.

Cookies

We do not set cookies. If the security check is switched on, Cloudflare Turnstile may use technical storage to tell people from automated programs.

Changes

If we change this policy we will update the date above.