Privacy policy
Last updated 25 October 2026.
Short version
We keep what you type into an invitation and what your guests type into a reply. We do not ask guests for an email address or a phone number. We do not run advertising or analytics scripts that follow people around. Events are deleted ninety days after the event date.
What an organiser gives us
The event name, occasion, host name as you write it, date, time, time zone, location text, optional map link, description, theme and your choice of options. Plus a one-way hash of your IP address, kept to stop one machine creating a thousand events. We do not store your IP address itself and the hash is not reversible.
What a guest gives us
The name they type, their answer, the size of their party, an optional note, an optional dietary line, and the name they attach to any bring-list line they claim. That is it. No email, no phone number, no account.
Cookies
Two, both strictly functional, both first-party. One remembers which reply on an invitation is yours so you can edit it instead of creating a duplicate. One remembers which bring-list line you claimed so you can release it. Both are random identifiers with no personal data in them and both expire after 180 days. There are no advertising or tracking cookies.
Who sees what
Dietary notes and host notes are visible only to whoever holds the organiser link. The guest list is hidden unless the organiser switches it on, and even then it shows names and plus-one counts, never dietary information. Secret Santa pairings are stored so each personal link can show one name; nobody, including the organiser, gets a page that lists the whole draw.
Links are the access control
Invitation links, organiser links and personal Secret Santa links are long random strings. Anyone who holds a link can see what that link shows, so treat the organiser link as a password. Organiser links are stored only as a cryptographic hash, which means a copy of our database does not hand anybody the ability to edit your event. These pages are marked noindex and are not submitted to search engines.
Hosting and processors
The site runs on Cloudflare in the United States and Cloudflare's edge network. Cloudflare processes requests, stores the database and may keep standard request logs for security and abuse prevention. We use no other processor. Nothing is sold or shared with advertisers.
Retention
An event, its replies, its bring list and any attached Secret Santa group are deleted ninety days after the event date by an automated job. Export the CSV from your organiser page if you want to keep the replies.
Your rights
If you are in the UK, EU, California or anywhere with comparable rules, you can ask for a copy of what we hold about you, ask for corrections, or ask for deletion. Because we hold no account and no email address, we need the relevant link to find the record. Write to rsvpdesk@bringalong.pages.dev. An organiser can delete guest data themselves by cancelling and waiting out the retention window, or by asking us.
Children
The service is for adults organising events. We do not knowingly collect data from children. A child's name typed by a parent into a party guest list is the parent's entry to manage and remove.
Changes
If this page changes in a way that matters, the date at the top changes with it.
Bringalong, PO Box 2241, Wilmington, DE 19899, United States