Privacy policy

Who we are

Wedding Lore is made by Fortunso Labs, Barcelona, Spain. Fortunso Labs is the data controller for the personal data described here.

For any question or request about your data, write to privacy@fortunsolabs.com.

What we collect

• Your account. The first time you use Wedding Lore, you get an account with only the name you choose. You can add a first name, gender, relationship status, a short description and a picture, all optional.
• Signing in, if you choose to. To keep your account across phones, you can sign in with an email address and password or with Google. Google's Firebase service handles the sign-in and holds your email address and, with Google, your Google name and picture. We keep only the ID Firebase gives you.
• Your profile in each wedding. Your username there and anything optional you add: first name, gender, relationship status, a short description and a selfie. We take a selfie only when you agree to it.
• What you do in a wedding. Your answers, picks and votes in the games, and the points they earn.
• Photos. The photos you share go to that wedding's private gallery. Before a photo leaves your phone, the app removes its metadata, such as location, device and time. We store the photo itself and smaller previews of it.
• If you host a wedding. The couple's names, the wedding date, place and time zone, the welcome message, the cover photo, the games you set up and the questions you write.
• Notifications. If you allow notifications in the Android or iPhone app, we store your phone's notification token and your language, so we can send you the wedding's notifications.
• On your device. The app keeps your sign-in and your language choice in your phone's or browser's storage. We use no cookies.
• Error reports. When something breaks, the app and our servers send an error report to Sentry. It identifies people and weddings by internal ID only. It contains no names, messages, photos or page addresses.

Ads, in the free version. At a wedding on the free plan, guests see an ad after each finished game and after each photo they upload. An advertising network shows these ads and receives, from your phone, its advertising ID, IP address, device and app details, and which ads you see and tap. In the European Economic Area, the UK and Switzerland the app asks for your consent before ads are personalised; without it, the ads aren't personalised. You can reset or delete your advertising ID in your phone's settings. At a wedding on a paid plan, nobody sees ads. We don't collect your location or your contacts, and we use no analytics. The camera is used only when you take a photo or scan a wedding's QR code, and the scan isn't stored.

Why we use it

• To run Wedding Lore for you: creating and joining weddings, the games, the points and the gallery. This is the service you ask us for (GDPR article 6(1)(b)).
• Your selfie, your optional profile details and notifications rest on your consent (article 6(1)(a)). You can remove them or turn notifications off at any time, in the app or in your phone's settings.
• To keep the service secure and fix what breaks, which is our legitimate interest (article 6(1)(f)).

Personalised ads rest on your consent (article 6(1)(a)); ads that aren't personalised, on our legitimate interest in keeping a free version (article 6(1)(f)). We don't sell your data. The advertising network never gets your name, photos, answers or anything from a wedding, and we don't use your data to train AI models.

Who can see what

• Guests of the same wedding see each other's usernames, profiles and selfies, the gallery and the rankings.
• The couple hosting the wedding sees everything in it. They can hide or delete photos, remove guests and delete a guest's data.
• Nobody outside the wedding sees any of it. A wedding is private and can only be joined with its QR code or link.

Who helps us run it

These companies process data for us, only to provide their service and only on our instructions:

• Cloudflare hosts the app, our servers, the database, the photo storage and this website.
• Google Firebase handles signing in and sends notifications. On iPhone, notifications go through Apple's push notification service.
• Sentry receives the error reports described above.
• An advertising network shows the ads in the free version, as described above, under its own privacy policy for the data it collects.

Google Play and the App Store deliver the apps under their own privacy policies.

Data outside the EU

Some of these providers process data outside the European Economic Area, including in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

How long we keep it

• A wedding's photos and guest data are deleted for good 12 months after the wedding date, by an automatic daily cleanup. The couple can delete their wedding sooner.
• Your account is kept until you delete it. An account with no sign-in and no wedding left is deleted 12 months after it was made.
• Your notification token is deleted with your data in that wedding, with the wedding itself, or as soon as the notification service says it no longer works.
• Error reports are deleted by Sentry after 90 days at most.
• Emails you send us are deleted within 12 months after the conversation ends.

Deleting your data

• Your data in one wedding: in the wedding, open your profile and tap Delete my data. Your username, first name, profile, selfie, answers, picks and votes are deleted. The photos you shared stay in the wedding without your name. To remove them, delete them from the gallery first, or ask the couple.
• Your whole account: see how to delete your account.
• The couple can delete any guest's data, photos included, or the whole wedding at once.

You can also ask us at privacy@fortunsolabs.com.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it or to move it elsewhere. You can object to our use of it, and withdraw any consent you gave. Write to privacy@fortunsolabs.com and we'll answer within a month. The app can't export your data by itself yet, so we'll send you the copy.

You can also complain to a data protection authority: in Spain, the Agencia Española de Protección de Datos (aepd.es), or the one where you live.

How we protect it

Everything travels over encrypted connections. Photos sit in private storage and are reachable only through links that expire within an hour. Each wedding's data is kept apart from every other wedding's, and our logs hold internal IDs, never names, messages or photos.

Children

Wedding Lore is meant for people aged 16 and over. If you believe a child under 16 has given us personal data, write to privacy@fortunsolabs.com and we'll delete it.

This website

This website sets no cookies and runs no analytics. Its fonts and images come from this site, never from another company. Cloudflare delivers the pages and processes your IP address to do so and to protect the site from attacks; we don't keep logs of visits.

On your first visit, the home page may switch to your browser's language. That choice happens in your browser, and nothing is stored.

Changes

When this policy changes, we publish the new version here with a new date.