This translation is provided for information only. Only the French version is legally binding.
Controller
Sébastien Sanna, author and publisher of Invitation Vivante
935 route de la Vy de l’Eau, 74140 Saint-Cergues, France
Email: [email protected]
What we cannot see
Text, photos, date, place, guest list, replies, guestbook messages, voice messages: everything is encrypted (AES-256-GCM) on your device before it is sent. The key is in the part of the link after the “#” sign, which browsers never send to the server. Guests’ replies are additionally sealed so that only the organiser can open them.
For the invitation’s content, the organiser is the controller: they decide what they collect from their guests. The publisher acts only as a technical provider and cannot read it. The server only sees technical information (dates, number of submissions, opening of a personal link), never their content.
What we process in the clear, and why
| Data | Why | How long |
|---|---|---|
| Technical identifier of the invitation, creation and deletion dates, plan | Run the service (contract) | Until the invitation is deleted |
| Number and date of submissions (replies, messages, photos), without their content; date a personal link was opened | Show activity to the organiser, send alerts (contract) | Until the invitation is deleted |
| IP address, as a fingerprint computed with a secret key renewed daily (pseudonymised) | Block abuse and mass submissions (legitimate interest: security) | 24 hours |
| Alert subscription address of the organiser’s device | Send alerts, which never contain the content of replies (consent, can be withdrawn at any time: Settings → Turn off alerts) | Until the invitation is deleted or you unsubscribe |
| Licence code, as a fingerprint | Verify the purchase (contract) | Until the invitation is deleted, then 12 months to handle any claim |
| Payment and billing data | Processed by Paddle, the controller for this processing (see its policy). We never see your card. | As set by Paddle |
| Your messages to support | Reply to you (legitimate interest) | 3 years after the last exchange |
Providers
- Supabase (Supabase Pte. Ltd., Singapore): storage in the London region (United Kingdom, a country recognised as adequate by the European Commission). Technical support and some operational processing may involve access from Singapore or the United States (Supabase, Inc.), governed by the European Commission’s standard contractual clauses. Invitation content remains encrypted and unreadable to Supabase.
- Cloudflare (hosting of the website pages, with no invitation data).
- Alert services from Apple, Google or Mozilla depending on your device: they deliver an alert with no content (“New reply”).
- Paddle (payment).
- Cloudflare Web Analytics: anonymous visitor statistics for the public pages of the site (visits, page views), with no cookies, no identifiers and no cross-site tracking. Nothing is measured inside invitations.
Fonts, music and libraries are served from our own site: no calls to third-party services when an invitation is opened, apart from storage.
Cookies and local storage
No cookies on invitations or on the dashboard. On the purchase page, Paddle’s payment module is only loaded when you click to pay: Paddle may then set cookies needed for the security of the transaction (see its policy). Your browser keeps locally, on your device only, the list of your invitations (to find them again) and, for guests, what is needed to display and edit their own reply. This data is strictly necessary and never leaves the device.
Storage period
Each invitation is deleted automatically, with all its data and files, at the end of the period chosen by the organiser (up to 6 months after the event, 12 months with the Wedding plan, extendable by 12 months). The organiser can delete everything immediately from the settings. Removed items are permanently deleted within 30 days.
Any health information (allergies) is hidden in the dashboard 30 days after the event, and guests must give explicit consent before sending it.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. As we cannot read encrypted content, the simplest is to contact the organiser of the invitation, who can remove a reply or delete everything. For any request: [email protected]. You can also contact the CNIL, the French data protection authority (cnil.fr).
Minors
The service is intended for adults organising an event. Underage guests may reply to an invitation received from someone close to them.