Privacy Policy

Effective July 10, 2026

Many Merry Moons (“we,” “us”) makes personalized invitations and event pages. This policy explains what information we collect, why we collect it, and the choices you have. The short version: we collect only what the product needs to work, we don't sell personal information, and your card details never touch our servers.

Information we collect

Account information. If you create an account, we store your email address. Sign-in uses one-time magic links — we never store a password.

Event information. When you create an event we store what you enter: the event title, host name, date, location, details, your personalized invitation text and image, and any optional sections you fill in (story, itinerary, wishlist, potluck, travel notes, planning to-dos).

Guest information. When guests interact with an event page we store what they submit: RSVP name, party size, and note; potluck sign-ups; wishlist claims; and, if the host turns it on, travel plans (arrival and departure times, flight, airport, party size). Guest submissions are visible to the event's host and co-hosts on their dashboard. Wishlist claims are anonymous to other guests; potluck names are visible to guests, since that's the point of a potluck board. Travel plans are never shown to other guests.

Payment information. Payments are processed by Stripe on Stripe's own hosted checkout page. We never see or store your card number. We keep a record that a payment happened (which event was published and when), and Stripe may send us your receipt email address.

Technical information. A session cookie (mmm_session) keeps you signed in. Our infrastructure providers (see below) log standard request data such as IP address and browser type to run and protect the service. We keep simple aggregate counters (like event-page views) that aren't tied to individual people.

How we use information

• To provide the service: render invitations, host event pages, collect RSVPs, and show hosts their dashboard.
• To send transactional email: magic sign-in links and messages about your events. We don't send marketing email without your consent.
• To process payments and prevent fraud, via Stripe.
• To keep the service secure, debug problems, and understand overall usage in aggregate.

We do not sell personal information, and we don't use your information for third-party advertising.

Who we share it with

Only service providers that make the product run: Stripe (payments), Resend (email delivery), Cloudflare (hosting, CDN, security, and privacy-friendly analytics), and our hosting provider. Each receives only what it needs to do its job. Beyond that, we share information only if required by law or to protect the service and its users.

Invitations and download codes purchased through our Etsy shop are also subject to Etsy's own privacy policy for that transaction.

Event pages and links

Event pages live at unlisted web addresses and are meant to be seen by the people the host shares the link with. They aren't listed in our navigation and we ask search engines not to index them — but anyone who has the link can open it, so hosts should share it thoughtfully. Dashboard and co-host links carry more access; treat them like keys.

Retention and deletion

We keep event data for the life of the event page so hosts and guests can return to it. You can delete your content, or ask us to delete your account, your events (including all guest submissions), or a guest submission you made, by emailing [email protected]. We'll act on verified requests within 30 days.

Your rights

Depending on where you live (for example the EU/UK under GDPR or California under CCPA/CPRA), you may have rights to access, correct, export, or delete your personal information, and to object to some processing. Email us and we'll honor these requests wherever we reasonably can, regardless of where you live.

Children

Many Merry Moons is for adults — accounts and purchases require you to be at least 18. Invitations often celebrate children (that's rather the point), but the information is entered and controlled by the adult host. We don't knowingly collect information directly from children under 13; if you believe a child has submitted information, contact us and we'll remove it.

Changes

If we make meaningful changes to this policy we'll update the date above and, for significant changes, note it on the site. Your continued use after changes take effect means you accept the updated policy.

Contact

Questions or requests: [email protected]. See also our Terms of Service.