Your data
Privacy
This page lists what we keep about you, who can see it, what the website stores on your device, and when we delete it.
What we keep
We started the guest list ourselves, from names we wrote down over months and the contact details we already had. Everything else is what you have told us since.
- For your household, we keep the name we know you by, your postal address, which celebration we invited you to, the language we write to you in, whether we sent the invitation, and our own notes. A note might say that you are coming by train, or that our families spell your surname two ways.
- For each person, we keep the first name and surname, whether you are an adult or a child, a child's age, an email address and phone number if we have them, anything you cannot eat, whether you are coming to each celebration, and notes.
- From the RSVP form, we keep your answers and any note you write us. The form used to ask how you would travel, where you would stay and what you wanted to hear more about. If you answered those questions then, we still have those answers.
- If you post on the rides and rooms board, we keep what you post: whether you offer or need a seat or a room, the day, the first name, a short note and the contact you chose to show. Posting is optional.
- If you turn on notifications on the invitation installed on your phone, we keep the address your phone's maker (Apple, Google or Mozilla) gives us to reach that phone, with your household. It contains no name and no phone number. We use it only for last-minute messages about the celebrations you said you are coming to, during the wedding week, and for nothing else. Turning notifications off deletes it.
- If you ask us a question from your invitation, we keep the question with your household, and our answer, which your invitation shows you. Only the two of us and our helper read your questions.
- We keep the access code printed on your card, and count how many times someone opened your invitation, with the date and whether it was a phone or a computer.
- Vercel, which hosts the site, counts page views. It records which pages people open, roughly where from, and on what kind of device and browser. It sets no cookie and keeps nothing that identifies you. The site removes your access code from the page address before Vercel counts the view, so no count leads back to your invitation.
Why we keep it
We use it to invite you, to tell the caterer what you can eat, to seat you next to people you like, and to reach you if plans change. We use it for nothing else.
We do not sell it, share it with anyone outside the list below, use it for advertising, or use it to make decisions about you.
Who can see it
Zachary Jepsen, Mathias Van den Driessche, and the person helping us run the guest list. Only named email addresses can sign in, and the site records every change any of us makes, with who made it and what changed.
- Your invitation page shows the names, the parts of the day we invited you to, where they are, and what you entered on the RSVP form. That covers who is coming, the email address and phone number you gave, what you cannot eat, and your note. You need to see those to correct them. Your postal address and our own notes stay on the private side of the site.
- A post on the rides and rooms board is the one thing other guests can see. Everyone invited to the same celebration sees it, with the first name, the day, the note and the contact you chose, and nothing else about you. Nobody can see anything of yours there until you post, and you can take a post down from your invitation at any time.
- Anyone with your code can open your invitation and read or change your RSVP, the same way anyone holding a printed RSVP card could fill it in. The site limits how fast anyone can guess codes, for each browser and across the whole site. If you lose your card, we can give you a new code.
- Three companies store the data because they run the servers: Convex for the database, Vercel for hosting, and Sentry for error reports. Nobody else receives it, apart from the notifications below.
- A notification travels through your phone maker's push service, which delivers it. The message is encrypted so that only your phone can read it, and it names nobody.
- Error reports contain no personal details, no recording of your visit and no access code. The site removes the code from any address in a report, and sends reports itself, so your browser does not contact Sentry.
- Apart from Vercel's page counts, the site has no analytics, no advertising and no social buttons. It serves its own fonts, like everything else on the page.
What the site stores on your device
The site uses no cookies to recognise or track you. Its only cookie is the sign-in cookie for our private pages, which only we use.
- Once your invitation opens, your browser remembers your access code so the next visit opens it straight away. To stop that, untick "Remember my code on this device" on your invitation, and your browser forgets the code.
- Your browser also stores a random number, which the site uses only to count your code attempts separately from everyone else's, and whether you chose the light or dark theme.
- All of this stays in your own browser. The site only ever receives the random number, and clearing your browsing data deletes all of it.
- An invitation installed on your home screen can also keep a small script, a service worker, whose only job is to show the notifications you asked for. It saves nothing and sees none of your browsing. It is added when you turn notifications on.
- "Add to calendar" builds the Apple calendar file in your browser. The Google Calendar, Outlook and map buttons are ordinary links. If you follow one, Google or Microsoft knows you did, as with any link.
How long we keep it
We delete everything by 30 November 2027, three months after the second celebration. That leaves time for thank-you cards and the last invoices.
That covers the households, the record of every change, our notes, the questions you asked us and our answers, the rides and rooms board, the phones that asked for notifications, every spreadsheet we exported and every sheet of codes we printed, wherever we saved them. If we keep a page of wedding photos online afterwards, it will not contain the guest list.
What you can ask for
You can ask for a copy of everything we hold about your household, a correction, or deletion, before the date above and for any reason. Ask either of us by message, by phone or in person. There is no form.
When we delete a household, its history goes with it, so no old copy of the list still holds your details. If you prefer, we can keep only your name and delete your address and phone number.
Last reviewed 18 September 2026. This page describes how the site works today. If we change what we collect, we update this page.