Privacy Policy

Effective October 8, 2026

Party Mail is a small, privately run service for sending party invitations and collecting replies. This page says what it stores, why, and who can see it.

If you are a guest

When you reply to an invitation, Party Mail stores what you type into the form: your name, your email address, whether you are coming, how many adults and children are in your party, any dietary needs, and any note you leave. The host of that event can see all of it and can download it as a spreadsheet.

If the host has turned on the guest list, other people who open the invitation see your first name, the first letter of your last name, and the size of your party. They do not see your email address or your note.

Your email address is used to send you a confirmation of your reply and a private link for changing it. The person running Party Mail also gets a short notice on their phone that a reply came in, with your name and your answer. You will not be added to a mailing list.

If you are a host

A host account holds your name and the public half of your passkey. The private half never leaves your device. Your events, the pictures you upload, and your guests' replies are stored with your account.

The connected Google account

The owner of Party Mail connects one Gmail account, and the invitations and confirmations for every event are sent from that address. Other hosts are not asked to connect anything. Party Mail asks Google for one permission, gmail.send, which allows sending mail and nothing else. It cannot read, search, or delete mail in that account, and it cannot see its contacts.

Google issues an access token and a refresh token, which lets Party Mail keep sending without asking again. Both are stored on the Party Mail server and are used only to send invitations and RSVP confirmations. They are not shared with anyone. The owner can remove the access at any time from the security page of that Google account.

Party Mail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and analytics

Party Mail sets one cookie, which keeps a host signed in and remembers a reply you have just sent. It is not used to track you across sites. If you allow analytics, Google Analytics sets cookies of its own.

The home page and the invitation pages ask whether you will allow visit analytics. This page and the Terms of Service load no analytics at all. Google Analytics loads only if you say yes, and it is told the page you visited without any private link. Your answer is saved in your browser. If your browser sends a Global Privacy Control or Do Not Track signal, analytics stays off and you are not asked.

The server's access log records the time and result of each request. It leaves out the address of the page, because invitation and reply links are private.

The iOS and Android apps

The apps use the same Party Mail service and store the same event and reply information described above. They keep your sign-in session and your private RSVP update links in protected storage on your device, so you can return without entering them again. The native apps do not send visit analytics. If you open a website from the app, that website's own privacy choices apply.

If you choose a picture for an invitation, the selected picture is uploaded to Party Mail. The server removes its original metadata and stores a resized copy for the invitation. The apps do not request access to your contacts, microphone, or location.

Who else receives your information

Nobody buys it and no advertiser receives it. It leaves the Party Mail server in four ways. Email goes out through Google's Gmail service. The phone notice about a new reply is delivered by Apple's push notification service or by Pushover. Visit analytics go to Google if you allowed them. An encrypted backup is copied each night to a second computer that the person running Party Mail owns.

How long it is kept

Events and replies stay until the host or the person running Party Mail deletes them. Backups are kept for up to twelve months and then expire. To have your reply or your account removed sooner, ask the host or write to the contact below.

Changes

If this policy changes, the new version will be posted here with a new date.

Contact

Questions and requests go to hello@partymail.app.