Privacy

Here is the complete list of what RSVP Machine stores: the event name, the host name, the date, the optional time, the location, the optional note that the host typed, a random secret that makes the host link work, and for every response, whatever name the guest typed in the box, their yes, maybe, or can’t, the number of people they said they’re bringing, anything they said they’re bringing, any dietary note they added, an email address if that guest chose to leave one, and the moment they tapped it. If the host switched on emails about responses, we also store the one address they gave us. That is everything. There are no accounts, no passwords, no phone numbers, no logins to abandon, no cookies, no tracking pixels, no ad networks, no third party scripts, and no analytics beyond the request counts Cloudflare shows us by default for keeping the site up. Nothing is sold or shared with anyone, because there is no revenue here to protect and nobody to sell it to. Your event lives at a link, and knowing the link is the only key that exists.

About those addresses, since they are the thing here most likely to turn into a mailing list somewhere else. Both are optional and neither is ever required to use this site.

A host may leave an email to have their own link sent to them, because losing the host link is the only way to truly lose an event. If that is all they want, we send the one message and never write the address down. Switching on emails about responses is what stores it, and then it lives on the event record and nowhere else. Clearing the field on the host page stops the emails and erases the address on the spot.

A guest may leave an email when they answer. It is used for three things and nothing else: a copy of their own answer, word that the date, time, or place has moved, and word that the party is off. The host never sees it. The host page shows how many guests can be reached and not one address, and the host has no export, no download, and no screen anywhere that lists them. Guests do not see each other's addresses either, because a change is sent as one message per guest rather than one message addressed to everybody. A guest removes their address by answering again with the email box empty, which writes nothing over it. There is no list, no mailing database, and no other event can see any of this.

Everything deletes itself 90 days after your event date. That is not a policy we promise to follow, it is how the data is written: each event goes into storage with an expiration attached, and the storage layer removes it on its own schedule whether anyone is watching or not. We could not keep your guest list past that date if we wanted to, and every address goes with it, the host’s and the guests’ alike, because they are stored on the event and the event is what expires. If you reschedule, the clock is recomputed from the new date, so a party six months out will still be there when it happens. And if you would rather not wait, every host page has a delete button that erases the event and all its responses on the spot, permanently, no confirmation email and no thirty day grace period. One tap and it is gone.

Make an event