Privacy
Last updated 2 October 2026
Invitely lets you make an invitation or a festive greeting and share it as a link. This page says what we keep about you, why we keep it, and how to have it removed.
Who is responsible
The team that runs Invitely decides how the information described here is used.
Questions about your information are welcome. A contact address will be listed here before Invitely opens to the public.
What we keep
- If you host. Your name, your email address and your password. The password is stored in a scrambled form that we cannot read. We also keep the events you make: title, date, place, description, cover and guest list.
- If you reply to an invite. The name you type, your answer, how many people you bring and any note you add. Your email address only if you choose to give it.
- If you send or open a greeting. The names in a greeting are part of the link itself. We do not save them in our database. Like any web address, the link can appear in our server logs.
- If you pay. Payment is taken by Dodo Payments. We never see your card number. We keep what you bought, when, and whether the payment went through.
- How the site is used. We count things such as invites opened and replies sent, to see what works. To count visitors without knowing who they are, we turn the IP address and browser type into a scrambled value that changes every day. The IP address itself is not stored with these counts. Individual records are deleted after 90 days; only daily totals remain.
- Server logs. The IP address and the page requested, kept for 30 days to keep the service secure and to find faults.
Cookies
We use only first-party cookies. One keeps a host signed in, for up to 30 days. One remembers a guest’s reply on that device, for up to a year, so the reply can be changed later. One remembers which shared link or campaign first brought you here, as a short code with no name or identifier, for up to 30 days, so we can count which links lead to new accounts.
There are no advertising cookies and no trackers from other companies, which is why you are not shown a cookie banner. Some things on a page, such as a playlist player in an invite, do load from other companies; see below.
Who else handles your information
- Amazon Web Services hosts the site, the database and stored pictures, and sends our email, from data centres in the United States.
- Dodo Payments takes payments and handles refunds.
- Unsplash. When an invite uses a photo from Unsplash, your browser loads the photo directly from Unsplash, which sees your IP address as any website would. Photos from Pixabay are served from our own storage.
- Spotify, Apple Music and YouTube. When a host adds a playlist to an invite, the invite shows that company’s own player. Your browser loads the player from the company, which sees your IP address and may set its own cookies, under its own privacy policy. Nothing loads from them on invites without a playlist.
- Cloudflare Turnstile checks that a person, not a script, is sending the form when you create an account or ask to reset a password. Your browser loads the check from Cloudflare, which sees your IP address and details of your browser and device. We receive only a pass or fail.
- Google, only if you choose to sign in with Google.
We do not sell your information, and we do not share it for advertising.
What hosts and other guests can see
The host of an event sees each guest’s name, answer and note. If the host has chosen to show the guest list, other guests see names and answers too. Anyone with the link to an invite can open it.
How long we keep it
- Your account and your events: until you delete them.
- A guest’s reply: until the guest removes it, or the host deletes the event or their account.
- Payment records: for as long as tax law requires.
Your choices
- Delete your account from your account page. Your events and their guest lists are removed with it.
- Remove your reply from the invite, on the device you replied from.
- Ask for a copy of what we hold about you, or for something to be corrected, by writing to us.
Depending on where you live, you may also have the right to complain to your data protection authority.
Age
Accounts are for people aged 16 or over. If you are younger, ask a parent or guardian to host for you.
Changes to this page
When this page changes, the date at the top changes with it. If a change affects how we use what we already hold, hosts are told by email first. See also the terms.