Your designs
Invitation designs are created and saved entirely inside your browser, using its local storage. They are not sent to a server, so we cannot read them, back them up, or restore them for you. Clearing your browser data will delete them.
Photos you upload
Photos you add to a design are read by the browser and stored locally alongside the design. They are never uploaded. Exporting a PNG, JPG, or PDF happens on your device too, which is why exporting works with the network disconnected.
Accounts
You can use the whole editor without one. An account exists so your designs follow you between devices and so an invitation can have a page of its own that guests reply on.
An account holds your email address, your name if you gave one, and - if you signed in with Google - the profile picture Google returns. Nothing else is asked for, and nothing is passed to anyone. Passwords are stored only as a hash, and so are session tokens, so a stolen backup does not hand anyone a working login.
If you publish an invitation, the details you put on it and your guests' replies are stored so the page can show them. Deleting the invitation deletes the replies with it.
Analytics
The site is built to run without analytics, and the current deployment does not load an analytics script. If that changes, this page will say which provider is in use and what it collects before it is switched on.
Advertising
Display advertising is not currently enabled. When it is, it will appear only on browsing and guide pages, never inside the editor, and never on a page where you are working on a design.
Fonts and assets
Fonts are self-hosted from this domain rather than pulled from a font service, so browsing a template does not tell a third party which page you are on. The decorative artwork is our own and is served from the same domain.
Contact
If something on this page is unclear or looks out of date, it is worth telling us, because the intent is for it to describe exactly what the software does.