Wonderful Invites

Cookie policy

Last updated 16 October 2026

We use only the few cookies and bits of browser storage the site needs to work, such as keeping you signed in. No advertising, no analytics, no tracking you around the web.

What cookies are

Cookies are small files a website saves in your browser and reads back later. Websites can also keep information in your browser in other ways (“local storage” and “IndexedDB”), which aren’t sent to the website with every visit. This policy covers all of them. For everything else about your information, see our Privacy policy.

Only what’s strictly necessary

Every cookie and kind of storage below is strictly necessary to provide something you’ve asked for, such as signing in, keeping the design you’re working on, or showing you your Secret Santa match. The law in the European Union and the United Kingdom doesn’t require consent for these, which is why we don’t show a cookie banner. They’re all set by our own site (“first party”), and none is used for advertising or to track you.

Cookies

sb-…-auth-token

Keeps you signed in to your account once you’ve signed in. It may be split into parts ending in .0, .1 and so on.

Ours, set by our sign-in provider (Supabase) · until you sign out, or up to 400 days

sb-…-auth-token-code-verifier

Only when you sign in with Google: proves that the sign-in returning from Google belongs to the browser that started it.

Ours, set by our sign-in provider (Supabase) · removed once you’re signed in

wi_device

Only when a Guest opens their Secret Santa match: a random code so the match stays on the first device that opened it, keeping it secret. We store only a scrambled (hashed) version of it.

Ours · 1 year

admin_session

Only for the owner of Wonderful Invites, signing in to the business’s admin pages. Visitors, Hosts and Guests never get it.

Ours · 30 days

Storage in your browser

These stay on your device. They aren’t sent to us with each visit, and they’re removed when you clear this site’s data.

invite-studio:last-design (local storage)

The invitation you’re designing, so it’s still there if you come back before publishing.

Ours · until you clear it

wi-message:… (local storage)

On a Host’s guest list page: the message you write for sending invitations by WhatsApp, text or other apps.

Ours · until you clear it

own-music (IndexedDB)

A song you choose for your invitation, kept on your device until you publish and it’s uploaded with your invitation.

Ours · until it’s uploaded with your invitation, or you clear it

Other services you may visit

Some things you choose to do take you to another company’s service, which has its own cookie and privacy policies:

  • Paying: Stripe’s secure payment page is on Stripe’s own website (checkout.stripe.com) and uses Stripe’s cookies, including for fraud prevention. See Stripe’s cookie policy.
  • Signing in with Google: Google’s sign-in page uses Google’s cookies. See Google’s cookie policy.
  • Directions: “Open in your maps app” opens Apple Maps, Google Maps or Waze, which follow their own policies.

The venue map on an invitation is drawn in your browser from OpenFreeMap’s map pictures. OpenFreeMap sets no cookies; like any website, it sees your IP address when your browser loads them. Our fonts and videos come from our own site, so no font or video service sets cookies.

Advertising and tracking

We don’t use any of these, on our site or in our emails:

  • advertising cookies, pixels or tags (such as those from Facebook, Google Ads or TikTok);
  • analytics tools that track visitors (such as Google Analytics);
  • fingerprinting, or any other way of recognising you across websites;
  • tracking pixels in emails to see whether you’ve opened them.

We do count when an invitation link is opened, so the Host can see that their Guest has seen it. That happens on our own site, only for that invitation, and isn’t used for anything else.

If this ever changes, we’ll update this page before anything new starts. In the European Union and the United Kingdom, and wherever else the law requires it, we’ll ask for your consent first, with a clear choice to say no; elsewhere we’ll give you a simple way to opt out. We’ll honour Global Privacy Control signals from your browser as an opt-out, and we’ll never sell your information.

Controlling cookies

You can see, block or delete cookies and site data in your browser’s settings (usually under Privacy or Site settings). Because we only use what’s necessary, blocking or deleting them affects how the site works:

  • without the sign-in cookies, you can’t stay signed in to publish or look after your invitations;
  • without wi_device, a Secret Santa match can’t be kept on your device;
  • clearing site data removes a design you haven’t published yet, and any song you haven’t uploaded.

Changes and questions

If we change the cookies or storage we use, we’ll update this page and the date at the top. Questions? Email hello@wonderfulinvites.com.