Your party, your data

If you organise a party: your name, email and password (stored scrambled, so nobody can read it), and what you add for your party: date, venue, guests, plan, quotes, budget, to-dos, helpers, notes, the seating plan, who has arrived on the day, and gifts (who gave what, shagun amounts and any photos you take of gifts). We also note when you last used Hurrahly.

Photos of gifts are made smaller on your phone before they're uploaded, and the hidden details cameras add to photos (like where they were taken) are left out.

If you're a guest: what you or the organiser enter when you reply: names, who's coming, adults or children, dietary needs and allergies, and a phone number or email only if you give one. Guests don't need an account.

If you post on a live guestbook (by scanning the QR code at a party): the name, message and photo you post, and a random code for your phone so we can stop anyone flooding the screen. No account, phone number or email. Photos are made smaller on your phone first, and where they were taken is left out.

If you're helping: your name and phone number (added by the organiser), the jobs you've been asked to do, and your updates.

Feedback that testers send us through the Feedback button.

The organiser sees everything about their own party. Nobody else using Hurrahly can see it.

Co-organisers are people the organiser invites to plan with them. They see and can change everything about that party, money included, and can leave at any time. Only the main organiser can delete the party.

Guests see the invitation and their own household's reply. Never the guest list.

Helpers see only their own jobs and the party's date, time and place. For a pick-up or drop-off they also see what the organiser adds: who, their mobile, where from and to, and flight details, with a Google map of the place. Never allergies, gifts or the budget. Their link stops working 3 days after the party.

A helper on the door (only if the organiser switches this on for them) also sees the names of the guests who are coming and their table, so they can tick people off as they arrive. Nothing else about guests: no phone numbers, emails, dietary needs or replies. The organiser can switch it off at any time.

Live guestbook: the guestbook's photos and messages are seen by the organiser and co-organisers, and by everyone looking at the party's TV screen. The organiser can hide or remove any post. The screen's link is private to the organiser and stops working 3 days after the party.

Hurrahly (us). Our admin page shows organisers' names and emails, so we can help with sign-in problems and invite testers, plus totals for analytics, like the number of parties, guests and replies. It is built so it never shows guests' names, dietary needs, allergies, budgets or notes.

To be completely open: like any app, the person who runs Hurrahly could technically open the database. We don't look at your party's details, and only do so if you ask us to fix something. Access is limited to one person, protected by two-step login.

• Dietary needs and allergies: deleted 30 days after the party.
• Helper links: stop working 3 days after the party.
• A party: until the organiser deletes it, or deletes their account.
• Gifts, shagun amounts and gift photos: part of the party, so they stay until the organiser removes them, deletes the party or deletes their account. A removed photo is deleted straight away (gift photos aren't in the nightly backup).
• Live guestbook photos and messages: guests can post until the day after the party. They stay as the organiser's keepsake until the organiser removes them, removes the guestbook, deletes the party or deletes their account. Want your post taken down? Ask the organiser, who can remove it with one tap.
• Your account: until you delete it (Account → Delete my account). Parties you're the main organiser of go with it straight away, for your co-organisers too.
• Backups: a locked copy of the database is made every night and kept for 30 days, so anything deleted is gone from backups within 30 days too.

Hurrahly uses a few trusted services to run:

• Supabase stores the data, and photos of gifts and guestbook photos, in the EU (Frankfurt, Germany), encrypted on their disks. Photos are in a private store: there's no public link to them.
• Vercel runs the website. Like any website, it briefly keeps technical logs (such as IP addresses) to keep things working and safe.
• GitHub keeps the nightly backup, locked with a passphrase only we have.

Invitations and helper links are sent from the organiser's own WhatsApp or messages. Hurrahly doesn't send them and can't see those chats.

We only use the cookies needed to keep you logged in. Your phone or computer also remembers small things, like which updates you've seen. No advertising or tracking cookies, so there's no cookie banner.

• See or download your guest list at any time (Guests → Download list).
• Change or remove anything in your party yourself.
• Delete your account in Account. It can't be undone.
• Guests and helpers can ask the organiser to change or remove their details, or ask us.

Hurrahly is in a private test with family and friends. If you're testing it, use the Feedback button. If you're a guest or helper, ask the organiser who invited you to pass your question on, and we'll sort it out.

See also our Terms of use.

If you're in the UK and unhappy with how we handle your data, you can also contact the Information Commissioner's Office (ico.org.uk).