Cookie Policy

1. What are cookies?

Cookies are small text files that a website places on your device when you visit. They are widely used to make websites work, to make them work more efficiently, and to provide reporting information to the site owner. We also use related technologies — including HTML5 localStorage, sessionStorage, and the IndexedDB browser database — which behave similarly to cookies for the purposes of this policy. References to "cookies" below cover all of these technologies.

Cookies can be "first-party" (set by InviteNow) or "third-party" (set by services we rely on, such as our authentication and storage provider, or embedded maps). They may also be "session" cookies (deleted when you close your browser) or "persistent" cookies (which stay on your device for a defined period or until you delete them).

2. How InviteNow uses cookies

We group cookies into four categories so it is clear what each one does:

• Strictly necessary — keep you signed in, remember which invitation you are editing, protect against fraud and abuse, and route traffic to the right servers. The Service will not function without these.
• Preferences — remember small choices such as your last-used template, language, or theme so the app feels consistent between sessions.
• Analytics — let us see, in aggregate, how many people view an invitation, how RSVPs are submitted, and where errors happen. This helps us improve the Service.
• Marketing — occasionally used to measure the effectiveness of a campaign. We do not use cookies for cross-site behavioural advertising and we do not sell your data.

3. Legal basis

We set strictly necessary cookies on the basis of our legitimate interest in running a secure and reliable service, as permitted by PECR. All other cookies (preferences, analytics, marketing) are set only after you give us your consent through the cookie banner. You can withdraw that consent at any time using the controls described in section 6.

4. Cookies we set

The exact cookies you see depend on which features you use, but the most common ones are:

• invitenow_consent — stores your cookie choices for up to 180 days so we don't ask again on every visit.
• sb-*-auth-token — set by our authentication provider to keep you signed in and to refresh your session securely.
• im_visitor_id — a persistent random identifier in localStorage used so that the same device is counted once when measuring invitation views.
• im_sid — a per-session identifier used as a fallback if localStorage is unavailable (for example in private browsing).

Lifetimes vary from a single browsing session up to 12 months. Where a third-party provider sets its own cookies (for example, embedded map tiles or our authentication provider), those cookies are governed by the provider's policies.

5. Third-party services

We rely on a small number of carefully selected providers to deliver parts of the Service. These providers may set their own cookies on your device when their components are loaded:

• Our authentication and storage provider, to keep your session alive and to serve uploaded media.
• Embedded maps and places services, when you view a venue location on an invitation.
• Email delivery providers, to track basic delivery and bounce events for transactional emails (for example, a guest's RSVP confirmation).

We only share what these providers need to deliver the relevant feature, and we have contracts in place that require them to handle data lawfully and securely.

6. Managing your cookies

You can change your cookie preferences at any time by clicking the cookie banner, by clearing theinvitenow_consent cookie in your browser, or by adjusting your browser's privacy settings. Most browsers let you block all cookies, block third-party cookies, delete cookies on exit, or warn you before a cookie is set.

Please note that if you block strictly necessary cookies, parts of the Service — including sign-in, editing, and RSVP collection — will not work properly.

7. International transfers

Some of our providers may process cookie data outside the country you are based in, including in the United Kingdom, the European Economic Area, and the United States. Where that happens, we rely on appropriate safeguards (such as Standard Contractual Clauses or the UK International Data Transfer Addendum) to make sure your information is protected to a standard equivalent to that of your home jurisdiction.

8. Changes to this policy

We may update this Cookie Policy as our Service evolves or when laws change. The "Last updated" date at the top of this page always reflects the most recent revision. Where a change is material, we will surface a notice in the cookie banner so you can review and refresh your preferences.

9. Contact

Questions about cookies or your data? Email hello@invitenow.app or write to Viralmove Limited, London, United Kingdom. If you are based in the UK or EU and are not satisfied with our response, you have the right to complain to your local data protection authority.