Your guests, your memories.

Partake is a wedding guest experience. Couples buy a Partake package to run photo, video, game, and memory features at their wedding. Guests use Partake for a single night by scanning a QR code.

This policy covers both sides: what we collect from couples who sign up, and what we collect from guests who show up.

Partake is operated by Partake Weddings LLC, a United States company and the data controller responsible for the personal information described here. You can reach us any time at support@partakeweddings.com; our mailing address is available on request.

From couples: name, email address, wedding date, couple names, event PIN, an optional guest list if you add one, your love story if you choose to write one for the Fill-in Story Game, your trivia answers, your custom challenges, your video prompts, and your Stripe customer ID and last-4 of your payment card (Stripe holds the full card, we never touch it). That is the whole set for a couple account.

From DJ and partner accounts:if you use Partake as a DJ reseller or join our partner program, we collect your business name, contact name, and email, plus (for partners) your city, Instagram handle, and how you heard about us. DJs also get a Stripe customer ID for their subscription. This is business-contact information used to run and bill your account — never sold or shared.

If you sign in with Google:when a couple or DJ chooses “Continue with Google” instead of email, Google shares your name, email address, and profile picture, which we store on your Partake account to create or recognize it. We request nothing beyond basic profile and email.

From guests:the name they type on the entry screen, the photos and videos they upload, the trivia answers they type, the story game words they type, the video prompt answers they record, and the photos they submit to complete scavenger-hunt challenges (which appear on the shared photo wall). We don’t collect email addresses, phone numbers, or account information from guests. There is no guest account.

Automatic, minimal:a random session token stored in the guest’s browser localStorage so we can recognize them when they come back mid-event. Standard request logs from Vercel (IP address, user agent, timing) are kept for 30 days for abuse prevention and then deleted.

We do not sell your data, and we never share guest names, photos, videos, trivia answers, or story games with advertisers or data brokers. Partake is paid for directly by the couple, so we’re never under pressure to monetize your guests. The only third party that sees aggregate usage data is our analytics provider (Vercel), and only after a visitor opts in on our cookie banner. See Cookies and analytics below.

We do not train models on your love story, your photos, or anything your guests create. The only text we ever send to The Partake Wizard’s underlying provider (Anthropic) is the love story or notes you type while setting up, never your guests’ photos, videos, or answers. Anthropic processes that text to generate your draft and, under its API terms, does not use it to train its models. We don’t keep the request on our side beyond saving the draft you approve.

We do not use facial recognition. We do not scan photos for faces, people, or identity. Uploaded images are stored as plain files.

Every piece of event data (photos, videos, story games, trivia, challenges, video prompt answers, guest names) is retained for 12 months from the wedding date. About a month before the deadline we email the couple a one-click export link. At 12 months, everything is permanently deleted.

Couple account data (name, email, payment history) is retained for as long as the account is active. Delete your account any time from the dashboard and we remove it from our live systems within 30 days.

Guest lists are a sensitive case. While they exist they’re encrypted at the application layer with AES-256-GCM. The decryption key lives in environment configuration, not in the database, so even an attacker with database access can’t read them. They’re also permanently deleted as soon as the event expires, regardless of whether the couple has exported the rest of their memories.

Every guest page has a “Delete my data” button in the footer. Tapping it removes the guest’s session, every photo and video they uploaded, their trivia answers, their story game entries, their video prompt responses, and every challenge completion they logged. There is no confirmation email and no approval from the couple: the guest decides, the data is gone.

Guests can also flag any photo (theirs or someone else’s) with the flag button on the gallery. Flagged photos disappear from the gallery immediately and land in the couple’s moderation queue for final delete.

Guests who want a copy of their own uploads can email us at support@partakeweddings.com from the address they’re willing to identify with and we’ll send a ZIP within 30 days.

Couples can export every artifact from their event any time via the memory portal’s “Export all” button. The export streams a single ZIP with photos, videos, video prompt answers, story games, trivia, challenges, and event metadata.

Couples can delete any individual photo, video, or prompt response from the memory portal. Deletes are permanent.

Couples can delete the whole event and everything in it from the dashboard. One confirmation, no undo.

Partake runs on a small set of vendors, each under a data processing agreement and contractually barred from using your data for their own purposes: Vercel (application hosting and, with your consent, privacy-first analytics), Supabase (database, file storage, authentication), Stripe (payments), Resend (email), Anthropic (The Partake Wizard), Tawk.to (the optional live-chat widget on our marketing pages), and Google (Sign in with Google, when a couple or DJ uses it). We keep this list current and will email active couples before adding a vendor that handles event data.

Supabase stores files in AWS S3 in US regions. Every file URL we hand to a browser is short-lived and signed: they expire within an hour, so a URL leaking later doesn’t grant access.

We send two kinds of email. Transactional messages are tied directly to your event: payment confirmations, storage-usage alerts, your sign-in login code, and the reminder before your memories expire at the 12-month mark. These keep your event working and the law does not treat them as advertising.

Marketingmessages exist to promote Partake — for example, an occasional nudge to share Partake with engaged friends. Every marketing email carries an unsubscribe link in the footer and honours Gmail and Yahoo’s native one-click unsubscribe button. Once you opt out we stop sending marketing mail to that address across every event you might run now or later.

Unsubscribing from marketing mail does not affect transactional mail. We still owe you the event-critical updates on your paid relationship with us. If you want to close the account entirely, that’s the delete-the-event flow described above.

We use a small number of strictly necessary cookies for couple authentication (session cookies set by Supabase Auth) and a single localStorage entry per guest per event to remember their session token so they can pick up where they left off. If you sign in with Google, Google’s sign-in widget sets its own cookies on Google’s domain to run that flow.

With your consent, we load privacy-first, cookieless product analytics (Vercel Analytics and Speed Insights) so we can see which pages people get stuck on. They set no cookies and don’t track you across other sites. Our marketing pages also offer an optional live-chat widget (Tawk.to) that sets its own session cookies, and it only loads if you accept it on our cookie banner. If you decline, neither one loads. We set no advertising cookies and no cross-site tracking pixels.

Partake is intended for adults setting up and attending weddings. The service is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has submitted personal data through Partake, email us and we’ll delete it.

If you’re a couple in the EU, UK, or another jurisdiction with a formal data processing framework, we’re happy to sign a Data Processing Agreement with you before you run your event. Our standard DPA mirrors the obligations in this policy and covers the usual GDPR requirements: security, sub-processors, data deletion, and incident notification. Because our vendors are US-based, the DPA relies on the EU Standard Contractual Clauses (and the UK Addendum) as the safeguard for personal data leaving the EU or UK.

Email support@partakeweddings.com with the subject “DPA request” and we’ll send you a countersigned copy within 48 hours. There is no fee and no minimum event size.

If this policy ever changes in a way that affects what we do with existing data, we’ll email every active couple before the change takes effect. Minor wording edits that don’t change the substance can ship without notice but will update the “last updated” date below.

Questions, concerns, or a data request? Email support@partakeweddings.com. A human replies within 48 hours.