Privacy Policy

Last updated: February 2026

At Love at Once, we take your privacy seriously. This policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

Account Information

When you create an account or sign in, we collect your email address. We use magic links for authentication, so we never store passwords.

Page Content

When you create a Love Page or Wedding Website, we collect the content you provide, including:

  • Names (sender, recipient, partners)
  • Messages, greetings, and custom text
  • Photos you upload
  • Event details (dates, locations, descriptions)
  • Guest information (for RSVP management)

Analytics Data

When someone views your page, we collect anonymized analytics including:

  • Hashed IP addresses - We use SHA-256 with a daily rotating salt to hash IP addresses. The original IP is never stored. This helps us count unique visitors while protecting privacy.
  • Device information - Browser type, device type (mobile/desktop), and screen size to optimize page rendering.
  • Geographic location - Country and city derived from IP at request time. We do not store precise locations.
  • Referrer - Where visitors came from (if available) to help you understand how people find your page.

Payment Information

Payment processing is handled entirely by Stripe. We never see or store your full credit card number. We only receive confirmation of successful payments and store references to your Stripe customer ID for subscription management.

How We Use Information

Service Delivery

  • Rendering your Love Pages and Wedding Websites
  • Processing RSVP responses and managing guest lists
  • Sending notification emails (first view alerts, RSVP updates, expiration reminders)

Service Improvement

  • Aggregated analytics to improve templates and features
  • Identifying and fixing bugs or performance issues

Communications

  • Transactional emails (magic links, receipts, page notifications)
  • Service announcements (if you opt in)

We will never sell your data or send you marketing emails without explicit consent.

Data Storage and Security

Where We Store Data

  • Database - Turso (distributed SQLite) with primary location in the United States
  • Files and Photos - Cloudflare R2 with global distribution for fast access
  • Payments - Stripe (PCI-DSS compliant)

Security Measures

  • All data transmitted via HTTPS
  • Session tokens hashed before storage
  • IP addresses hashed with rotating salts
  • No passwords stored (magic link authentication)

Data Retention

Active Pages

Your page content remains stored for the duration of your subscription (30 days, 1 year, lifetime, or until your wedding date + subscription period for wedding sites).

Expired Pages

After expiration, your page enters a 30-day grace period during which you can renew. Content is permanently deleted 30 days after the grace period ends.

Analytics

Page view analytics are retained for 2 years, then automatically aggregated and anonymized. Individual view records are deleted.

Account Deletion

You can request account deletion at any time by contacting support@loveatonce.com. We will delete your account and all associated data within 30 days.

Your Rights

You have the right to:

  • Access - Request a copy of all data we hold about you
  • Correction - Update inaccurate information in your account or pages
  • Deletion - Request deletion of your account and all associated data
  • Export - Download your page content and analytics data
  • Object - Opt out of non-essential communications

To exercise these rights, contact us at privacy@loveatonce.com.

Third-Party Services

We use the following third-party services:

Cookies

We use essential cookies for:

  • Authentication - Session cookies to keep you logged in
  • Password Protection - Cookies to remember wedding site password verification

We do not use third-party tracking cookies or advertising cookies.

Children's Privacy

Love at Once is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us at:

Privacy Policy | Love at Once | LoveAtOnce