Privacy policy

Who we are

The guest list is a free service run by Plans, a sole-trader business in Karlovac, Croatia (plans.hr). For any questions about your data, write to info@plans.hr.

What data we keep

When you open an account, from you:

• your email address, used only for logging in,
• the name, type and date of your celebration,
• everything you write on your celebration page yourself: the welcome note, your story, the schedule of the day, the locations, the quiz questions.

About your guests, when you add them or when a guest replies on their own:

• their name, whether they are coming, how many adults and how many children,
• optionally: a message, a meal choice, allergies and the names of the people coming with them,
• a message in the guest book, a suggested song and their quiz result, if the guest does any of these.

Nothing else. No ads, no selling of data, no tracking you around the internet.

Allergies and meal choices

The allergies field is not required. Guests fill it in themselves, if they want to, so the hosts and the venue know what to watch out for. The law treats information about allergies as health data, so we keep it only because the guest chose to enter it. Only the owner of that guest list can see it. We never use it for anything else.

Who is responsible for what

You are responsible for your own guest list. You decide who you add, who you send the link to and when you delete the list. We only store that data and show it to you, on your behalf. If one of your guests wants their data corrected or deleted, the quickest way is for them to contact you. They can also write to us at info@plans.hr, and we will let you know.

Logging in without a password

There are no passwords here. When you log in, we send a link and a code to your email. They work once and only for a short time, and every new login or new device needs a new link. That way there is no password to be stolen, guessed or forgotten, and only someone with access to your inbox can get into your account.

Emails we send you

• a login link, when you ask for one,
• a summary of what is new on your list, at most once an hour and only if something has happened.

You can turn notifications off whenever you like, on your celebration page or with the link at the bottom of the email. We don't send you advertising.

Where the data is

The database and images are stored with Supabase, on servers in London, in the United Kingdom. The United Kingdom is outside the European Union, but on 19 December 2025 the European Commission confirmed that personal data is protected there to the same standard. That decision is valid until 27 December 2031, so European data may be stored there without any additional conditions.

Who else handles the data

We work with a few companies without which the service would not run. They may use the data only for what we need them for:

• Supabase: the database, images and login (London),
• Vercel: serving the website itself,
• Google Workspace: sending our emails from info@plans.hr,
• Google Translate: only if a guest switches the page to English. The text on the celebration page is then sent to Google to be translated. Guests' names are not sent.

Counting visits

We record which page was opened, roughly where the visitor came from (for example from Google or Instagram), whether it was opened on a phone or a computer, which button was clicked and how far down the page they scrolled. That last one we record only on public pages, never inside the app or on guest links. We don't set any cookies and we don't store IP addresses, only an unreadable fingerprint of the address that changes every day, so it can't be used to tell who is who. We only look at these numbers added up, to know how many people use the app.

Protection against abuse

So that nobody can flood your list with fake RSVPs, we keep track of how many requests came from one connection. We don't store the IP address for this either, only an unreadable fingerprint of it that the address can't be recovered from.

Sharing your list

Your list is private until you turn on sharing by link yourself. Then anyone with the link can see what you have shared, but nobody can change your list. You can turn sharing off at any time, with one click.

Cookies

We use only necessary cookies: the one that keeps you logged in and, when a guest hearts a song, one that remembers this browser has already voted. No marketing cookies and no third-party analytics cookies.

How long we keep data

Until you delete it. You delete a celebration and all its guests yourself, with one click. That is permanent. If you also want us to delete your account and email address, write to info@plans.hr and we will take care of it within 30 days.

Your rights

You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict its processing and to object. Just write to info@plans.hr. If you think we are not handling your data properly, you can complain to the Croatian Personal Data Protection Agency (AZOP), azop.hr.