Last updated October 5, 2026

Privacy Policy

Preinvite (“we”, “us”) runs preinvite.me, where hosts make pages for events they’re planning and guests put their names on the list. This policy explains what we collect, why, who sees it, and the choices you have.

What we collect

If you make an account (hosts)

• Your name, email address and password. Your password is only ever stored scrambled (hashed), so nobody, including us, can read it.
• Your event pages: each event’s name, when and where, your note for guests, and the “Hosted by” name (your account name unless you change it).
• Password-reset links: if you use “Forgot your password?”, we email you a link that works once, for an hour. We keep only a scrambled copy of it.
• Notification choices and devices: whether you want an email for each new sign-up and, for each phone or computer where you turn on push notifications, the address its browser gives us for sending them (at the push service of Apple, Google, Mozilla or Microsoft), the keys that come with it, a name for the device like “iPhone · Home Screen app”, and when we last sent it one.

If you sign up on an event page (guests)

• What you enter: your name, your email address or phone number (or both), how many people are coming, and any note.
• Which event you signed up for, and when.

If you send us feedback

• What you write with the Feedback button, plus your name and email address if you give them. Both are optional, and we use your email only to reply to you.
• Which page you sent it from, when, and your account if you’re logged in.

When anyone visits

• Visit counts: which page was opened, whether it was opened by scanning a QR code, the name of the website that sent you (like facebook.com), and the date and time. To tell visitors apart without knowing who they are, we keep a code that can’t be turned back into your identity. If you chose “Allow cookies”, it’s made from a random ID in a cookie. If not, it’s made from your internet address and browser, and it changes every day.
• Security records: to stop password guessing and spam, we keep scrambled records of recent log-in tries, new accounts, new event pages, sign-ups and feedback, made from the internet connection they came from (and, for log-ins, the email address used; for new event pages, your account), for about a day.
• Server logs: like most websites, our web hosting company keeps standard logs (such as internet addresses, browser type and the pages requested) to run the site and keep it secure.

How we use it

• To run Preinvite: show event pages, take sign-ups, show hosts their guest lists, and keep you logged in.
• To email hosts: links to reset their password, and (unless they turn it off) a note for each new sign-up on their events, with what the guest entered. Guests don’t get emails from us.
• To send hosts a push notification when someone signs up for one of their events, with the guest’s name and party size, on the devices where they turned notifications on.
• To show hosts how many times their page was opened and its QR code scanned. They see totals, never who.
• To keep Preinvite safe from spam, abuse and break-ins.
• To see how Preinvite is used, so we can make it better.
• To read your suggestions and feedback, and to answer you when you contact us or leave your email with feedback.

We don’t use your information for advertising, and we don’t send marketing emails.

Who sees it

• The event’s host sees what each guest entered (on the site, and in the sign-up email and notification if they get them) and can print or download the list. What a host does with a guest’s details after that is up to the host, though our Terms of Use ask hosts to use them only for their event.
• Anyone with an event’s link can see that page: the event’s name, when and where, the host’s note and the “Hosted by” name. Guest lists are never shown there, and event pages are kept out of search engines.
• The people who run Preinvite can see the information when it’s needed to run the site, fix problems or keep it safe. When someone makes a host account, they also get an email and a notification with the new host’s name and email, and when a host makes an event page, an email with what’s on it and the host’s name and email.
• Feedback goes only to the people who run Preinvite, never to an event’s host. It’s also emailed to us, so our email provider keeps a copy.
• Services we rely on: our web hosting company stores the site and its data, and sends its emails. Our pages load their fonts from Google Fonts, so your browser connects to Google, which receives your internet address. Google Fonts doesn’t set cookies. Our pages also show a Buy Me a Coffee button, for anyone who’d like to support Preinvite. It comes from Buy Me a Coffee, so your browser connects to them too, and they receive your internet address. The button doesn’t set cookies. If you click it, the panel that opens is Buy Me a Coffee’s own page, and anything you enter there, including a payment, is handled by Buy Me a Coffee under their own privacy policy.
• Push services: push notifications reach a host’s phone or computer through the push service its maker runs (Apple, Google, Mozilla or Microsoft). We encrypt each notification before it leaves us, so the push service can’t read it: it only passes it on to the device.
• The authorities, if the law requires it, or to protect someone’s safety or rights.
• A new owner, if Preinvite is ever passed on. This policy would still apply to your information.

We never sell or rent your personal information, and we don’t share it with advertisers.

Cookies

We use a few cookies to keep hosts logged in and to remember your cookie choice, plus one optional cookie for counting visits, only if you allow it. Guests who just sign up get no cookies unless they answer the cookie question. The Home Screen pop-up keeps a note or two in your browser, and push notifications need a small script your browser keeps. The Cookie Policy lists them all.

How long we keep it

• Your account: until you delete it, or ask us to.
• Event pages and their guest lists: until the host deletes the page (its list goes with it), removes a guest, or their account is deleted.
• “Keep me logged in”: 60 days, or until you log out.
• Password-reset links: an hour, or until they’re used.
• Feedback and our replies: until we delete them, or you ask us to.
• Devices with push notifications: until you turn them off on that device, remove it on the Account page or log out on it, its push service tells us it no longer takes them, or your account is deleted.
• Visit counts: about 13 months.
• Security records: about a day.

Your choices and rights

• Hosts can edit or delete their event pages, and remove guests from their lists, at any time.
• Hosts can change their name, email and password, turn sign-up emails and push notifications on or off, or delete their account (which also deletes their event pages and guest lists), on the Account page.
• To get a copy of your information, or for anything you can’t do yourself, email privacy@preinvite.me.
• Guests: to change or remove your sign-up, ask the host, or email us with the event’s link and the name you signed up with.
• Cookies: change your choice at any time with “Cookie settings” at the bottom of every page.

We’ll reply within 30 days. These choices are open to everyone, wherever you live. Depending on where you live (for example the European Union, the United Kingdom or California), local law may give you more rights, such as objecting to how we use your information or complaining to your data protection authority. To use them, email us. We don’t sell or share personal information as California law defines those terms.

For people in the European Union and the United Kingdom

We use your information because it’s needed to give you what you asked for (your account, your event pages, your sign-up), because we have a legitimate interest in keeping Preinvite safe and seeing how it’s used, and, for the optional visitor cookie, because you agreed. You can take back that agreement at any time in Cookie settings.

Keeping it safe

Preinvite only works over a secure connection (HTTPS). Passwords, password-reset links and “keep me logged in” cookies are stored only in scrambled form, repeated log-in tries are blocked, and only the people who run Preinvite can get to the data. No website can promise perfect security, so please use a password you don’t use anywhere else.

Children

Preinvite isn’t meant for children under 13, and we don’t knowingly collect their information. If you think a child has given us information, email privacy@preinvite.me and we’ll delete it.

Where it’s kept

Preinvite is run from the United States, and our web hosting company keeps its data on servers in the United States. If you use Preinvite from another country, your information is sent to and kept in the United States.

Changes to this policy

If we change this policy, we’ll update the date at the top. If a change is important, we’ll also put a notice on the site before it takes effect.

Contact

Questions or requests about your information: privacy@preinvite.me.