Privacy & Security

Data Protection

• Role Separation: We enforce strict Role-Based Access Control. Guests can only access their invitations, while administrative features are restricted to verified administrators only.
• Browser Security: We use modern browser security to protect your session from cross-site scripting and data leakage.
• Minimal Data Retention: We only collect the information necessary to manage the events you are invited to. If an event gets removed, so does all your related information.
• Private Infrastructure: Both our web application and database are hosted on privately owned hardware following modern security standards & encryption where possible to ensure complete control over your data with zero third party influence.

Audit & Transparency

To ensure accountability and detect unauthorized access, we maintain a Security Audit Log. This log records:

• - Login attempts (timestamp and authentication method)
• - Unauthorized resource accesses
• - Partial IP addresses and basic device information

These logs are strictly for security auditing and are accessible only to system administrators.