Privacy
Short version: accounts are optional, there are no ads, and we never sell data. Your plans live in your browser unless you share them or sign in. We count anonymous usage so we know what to improve. We never record what you type into a plan.
Your party plans
- By default, parties are saved only in your browser's storage on your device. Clearing your browser data deletes them, so use Export → Full backup if they matter to you.
- "Send a copy" links contain the party inside the link itself, after the
#. That part of a URL is never sent to a server. Anyone you send it to can see that party. - Live sharing (co-planner links, RSVP links, guest date polls) stores that one party on our server so everyone sees the same version. Only people with the co-planner link can open or edit it. We store only a scrambled (hashed) version of its secret key. The RSVP link lets guests see the party name, date, time, location and your invitation message, and submit a reply, but not your guest list, budget or notes.
- Guest replies (name, head count, yes/maybe/no, allergies, a note) are stored with that party so the hosts can see them.
- Guest emails and personal invitations. Emails you add to your guest list are part of your party, so they're stored with it when live sharing is on, and co-planners can see them. We never email your guests ourselves. “Write in Gmail” and “Email app” open a message in your own email, and you choose whether to send it. Each personal RSVP link carries a private key for that guest, and we store only a scrambled (hashed) version of it. When a guest replies, their browser keeps a private key so they can change their answer later.
- Shared parties that nobody opens for 12 months are deleted automatically, along with their replies.
Optional Google sign-in
- If you choose Sign in with Google, we receive your name, email address and profile picture link from Google. We never see your Google password, and we don't ask for access to anything else (no contacts, calendar or Drive).
- While you're signed in, your parties are saved to our server and linked to your account so they appear on your other devices. The site's operator can see account emails and names, and how many parties each account has, to understand who uses the site. We don't send marketing email or share your details with anyone.
- A secure, HttpOnly cookie keeps you signed in for up to 180 days. Signing out ends that session.
- Delete your account anytime from the account menu (top right). That removes your name, email and list of saved parties. Parties you shared stay available to your co-planners until nobody opens them for 12 months.
Google Sheets (optional)
If you connect Google Sheets, Party Binder asks Google for permission to create files in your Drive and edit only the files it creates (the drive.file permission). It can't see any other files. We keep that permission encrypted on our server so the sheet can update itself, and use it only to write your party's details into the sheet you asked for. Disconnect anytime from the account menu. That revokes the permission with Google, and your existing sheets stay in your Drive. Deleting your account revokes it too.
Feedback
If you send feedback (the Feedback button, or the question after your first party), we store your message, anything you add about what you were trying to do, the email address you choose to give us (prefilled if you're signed in; you can remove it), and which page you were on, without any party details. Only the site's operator reads it, to improve the site and, if you left an email, to reply. Feedback isn't shared or used for marketing.
Usage statistics
To learn which features help and what's broken, the site sends our own server (no third-party analytics) events like "page viewed", "party created (kids' birthday)", "date locked", "calculator used", counts such as the number of tasks or guests, and JavaScript error messages. Each browser gets a random ID so we can tell repeat visits from new ones. It isn't linked to your name, email or anything you type. We also record which site or tagged link sent you here.
Usage statistics don't use cookies (the only cookie is the sign-in cookie, and only if you sign in). If your browser sends Do Not Track or Global Privacy Control, we don't record anything. Raw usage events are deleted after about 13 months.
Vendor suggestions
We may suggest local vendors (venues, caterers and so on) inside the planner. Partners are always labeled, and we may earn a referral fee when you book through a link. That never changes your price. When you click a vendor link we count the click (vendor, date, kind of party), without your name, email or party details, and we don't share anything about you with vendors.
Third parties
Pages load only from partybinder.app, and the fonts are hosted here too. The only other company involved is Google, and only if you choose to sign in with Google.