Privacy

How we use your information

This site is for invited wedding guests. Lindsay and Tyler, the couple, use the information submitted through the RSVP form only to manage the guest list, plan the wedding, and send transactional messages about an RSVP or access to the couple-only dashboard.

We do not sell guest information or use it for advertising or marketing.

Information we store

Depending on what applies to an invitation and what a guest provides, the RSVP system stores:

• household and guest names;
• attendance choices and response history;
• a contact email or phone number (at least one is required);
• dietary status and dietary details for attending guests;
• an optional note and song request; and
• security, session, and email-delivery records needed to operate the private RSVP.

Returning to your response

Email and phone numbers help us contact you; they do not grant access to an existing response. Your current browser can remember your household, and your private update link lets you edit on another device. Anyone with that link can edit your response, so keep it private. Links expire after 180 days and can be revoked by the couple.

If you provide an email, your confirmation includes the update link. Phone-only guests should copy and save it; we do not send automated text messages. Contact the couple if you lose access. Possible duplicate responses are reviewed by the couple, never automatically merged.

Services that process information

Vercel hosts the website and its server functions. Neon hosts the RSVP database. Resend delivers transactional guest confirmation messages and the couple's daily RSVP summaries, as well as the email magic links used for administrator sign-in. Better Auth manages those magic-link administrator sessions for the couple-only dashboard.

Essential cookies and site measurement

When a household saves or opens its private update link, an essential first-party guest RSVP session cookie may remain for up to 30 days. An administrator dashboard session cookie may remain for up to 7 days.

These session cookies are HttpOnly and SameSite=Lax, and are sent with Secure in production. They maintain private RSVP or dashboard access and are not used for advertising or marketing.

Separately, Vercel Analytics and Speed Insights provide aggregate usage and performance measurements for the public homepage, without advertising cookies. We remove query strings and fragments from measured URLs. RSVP forms, private update links, the administrator dashboard, and other private routes are not tracked. Guest names, contact information, and form answers are not sent to analytics. The homepage also uses an origin-only referrer policy so its URL path, query, and fragment are not included in measurement request referrer headers.

Retention

Deletion is not automatic. Beginning February 5, 2027, the couple can initiate the retention process after they review a current private export and the records scheduled for deletion. Once they confirm the reviewed purge, identifiable household, guest, RSVP, contact, dietary, note, song, invitation-credential, guest-session, RSVP access, and email-delivery records are deleted. Only anonymized, count-only totals may be retained.

Backups and logs held by Vercel, Neon, or Resend follow each provider's own retention policies.

Questions or requests

Email privacy@lindsandtyler.com to ask about, correct, or request deletion of RSVP information.