Privacy policy

Controller

The controller and contact address will be added before the public launch.

Data stored

The email address is stored for each account. Organizers record guest names, optional notes, tags, table assignments, seat assignments, and room plan data in their events.

Purpose

The data is used to manage seating plans and to let guests find their table and seat through a private event link.

Retention

Active events are not deleted solely because of their age. When you delete an event, guest access is blocked immediately. You can restore it from the event overview within 30 days. After that period, the daily cleanup permanently removes the event and its planning data.

Processors

The application runs on Cloudflare. Password reset messages are sent through Resend when the required configuration is enabled.

Cookies and tracking

The application uses cookies for sign in and for the selected event. Cloudflare Turnstile protects registration, sign in, and password reset from automated abuse. This establishes a connection to Cloudflare.

The optional Cloudflare Web Analytics integration is currently disabled. Enabling it in the future requires a corresponding update to this policy.

Guest links and fonts

Anyone who knows the private guest link can view the shared seating list and room plan. Organizers can regenerate the link in settings, which invalidates the previous link. Application fonts are served directly by SeatingBuddy.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection under the GDPR. Contact the controller named above to exercise them. You may also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).