Privacy
What we hold, and what we do with it
Last updated 28 September 2026
The short version
We are Ally Johnson and Marius de Vogel. This is the website for our wedding on 18 September 2027, and we run it ourselves. It is not a business.
We hold the details our guests need to be invited and to reply, and nothing else. We do not sell anything, we do not advertise, and we do not hand your details to anyone who does. When the wedding is over and the thank-you notes are written, we delete the lot.
This page explains what we hold, why we hold it, who else can see it, and how to make us change or delete it.
What we hold, and why
All of it came from you, or from the friend or relative who told us how to reach you.
- Your name
- To address the invitation, to seat you, and to know who is coming.
- Your mobile number
- To send the invitation, to text you the code that opens your reply, and to reach you about the day itself.
- Your email address
- The same, where you would rather hear from us by email. Optional.
- Your reply
- Who is coming and who is not, the name of a plus one, and any message you leave us.
- Anything the kitchen should know
- Allergies, what you do not eat, and access needs, given per person. We pass these to the venue as a list of requirements, shortly before the day.
- Pages viewed
- A count of which pages are read, so we know whether anyone found the travel notes. No cookie, no advertising network, and nothing that follows you off this site.
Who else can see it
Only the companies that run the machinery, and only so much of it as the job needs. Each is bound by its own contract to process what we send on our instructions and for nothing else. None of them may use your details for their own purposes, and none of them is paid for your data in any form.
- The database
- Neon, in Ohio, United States. It holds the guest list and the replies, encrypted in transit.
- The web server
- Fly.io, in Chicago, United States. It runs the site and the reply form.
- The network in front of it
- Cloudflare. It delivers the pages, filters abuse, and tells our own counter which country a visit came from.
- The text messages
- A messaging provider passes each text to the mobile carriers. It receives the number and the message, and it does not receive your reply, your email address or anything else on the guest list.
- The emails
- An email provider does the same for anything we send by email.
- The venue
- Parc Broekhuizen in Leersum is told how many are coming and what the kitchen needs to know. They are not given phone numbers or email addresses.
Where it is kept
On servers in the United States, which is where the companies above run the parts they run. Guests living in the European Economic Area or the United Kingdom should know that their details are therefore transferred out of it, under the standard contractual clauses each provider offers, and that we have kept the amount of data small enough that there is very little to transfer.
The connection to this site is encrypted, the database connection is encrypted, and your verification code is stored only as a hash, so not even we can read it back.
How long we keep it
The verification code expires ten minutes after we send it, and five wrong guesses destroy it. Page-view records are deleted automatically after 180 days.
Everything else — the guest list and the replies — we delete within three months of the wedding, once the thank-you notes are written. If you ask for yours sooner, we will delete it sooner, though we may need to keep your name on the list until the day itself so that the venue counts you correctly.
What you can ask of us
Write to us and we will do it ourselves, by hand, usually the same week. There is no form and no account to sign into.
- Show me what you have
- We will send you everything the guest list holds about you and your party.
- This is wrong, fix it
- Tell us what it should say. You can also change your reply yourself, at any time, by opening it again.
- Delete me
- We will remove you from the guest list and the reply. Say so and we will confirm when it is done.
- Stop texting me
- Reply STOP to any message, or tell us, and the number is removed from the list that day. You can still reply to the invitation; we will send your code another way, or record your answer by hand.
- I would rather not be on a website at all
- Then you will not be. Tell us and we will keep your details on paper and take your reply over the phone.
Children, and other people’s details
Children invited to the wedding appear on their parents' invitation, and their parents answer for them. We ask nothing of a child directly and this site is not addressed to one.
If you tell us about someone else — a plus one, or a relative travelling with you — please tell them we hold their name, and point them here.
Changes, and how to reach us
If we change anything here we will change the date at the top of the page. We have no reason to broaden what we collect, and every reason not to.
Write to [email protected] and one of us will answer. If you would rather speak to a person you know, ask whoever gave you the invitation for our number.
Guests in the European Economic Area have the right to complain to their national data protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.
