Privacy policy
This is a translation of the Spanish version, which prevails in case of doubt. Last updated: 17 October 2026
This policy explains what personal data webding processes, why, for how long and what rights you have. We've written it to be understood.
Who is the controller
The controller of the account data is Daniel Ceballos, contact email hola@webding.es, owner of webding.
For the data that guests send when they reply, the controller is the couple who created the website, and webding processes it on their behalf as processor (see below and the data processing agreement).
Your account and your website
| Data | Email and password to log in (of the password we only store a hash encrypted with PBKDF2, from which the password can't be recovered; your browser transforms it before sending it, so it never reaches us). If you log in with Google, we receive your email, your name and an identifier of your account from Google, and nothing else. We also store the wedding details you write in the wizard: names, date, places, order of the day, phone numbers and contact email, questions for your guests, a link to the photo album, the gift list if you add one (account number, holder and link; anyone with the link to the website will see them) and, if you upload one, a cover photo (we shrink it and remove its location data; anyone with the link to the website can see it and it's deleted when the wedding is deleted). If you invite your partner to edit the website, we store their email to give them access and let them know. |
|---|---|
| Purpose | To provide the service: creating, publishing and maintaining your website and showing you your guests' replies. |
| Legal basis | The contract (the terms of service you accept when you log in). |
| How long | As long as you have the account. The website is archived 30 days after the wedding. You can delete a wedding or the whole account whenever you like. |
| Who sees it | What you publish can be seen by anyone with the link to your website (the websites don't appear in search engines). Everything else is only seen by you and, to support you, run the service and prevent abuse, by the webding administration: which accounts exist, when they were created and last used, how they log in (with a password or with Google, never the password itself) and which weddings each one has. |
The service is for people aged 18 or over.
Guests' replies
| Data | Name, email, phone (optional), whether you're coming, number of adults and children, names of the people coming with you (and the children's ages, if you give them), menu, allergies or intolerances, song, message for the couple and the answers to their questions. |
|---|---|
| Purpose | So the couple can organise their wedding. It isn't used for anything else. |
| Legal basis | Your consent when you send the form. Allergies, intolerances and the gluten-free menu are health data: they're only stored if you tick the specific consent box. |
| Who sees it | Only the couple, from their panel (which requires having logged in less than 12 hours ago). webding doesn't use or share it, unless the couple expressly takes out a service that needs it (for example, sending invitations or printing); in that case, webding processes it only to provide that service, as processor. |
| How long | It's deleted automatically 90 days after the wedding, together with any seating plan the couple has made (with your name). The couple can delete your reply sooner. |
If you give children's names or ages, you do so as the responsible adult and only so the couple can organise the wedding.
Guest list and what the couple writes down
| Data | If the couple adds you to their guest list: your name, the group or family you're with, whether you're an adult or a child and, if they add them, your email and phone. They can also enter your reply by hand (if you give it to them by phone or in person), the table they seat you at, the favour they give you and whether they've sent you the invitation by email. Your reply is linked to your name on the list so the couple knows who has replied. |
|---|---|
| Purpose | So the couple can organise their wedding: knowing who still has to reply, seating the guests, preparing the favours and, if they wish, sending you the invitation. |
| Who is the controller | The couple, who are the ones adding you; webding stores it on their behalf as processor. |
| Invitation by email | If the couple sends it, you'll receive an email from webding's address with their names, through Resend. Your email is only used for that; webding won't send you anything else. |
| How long | It's deleted together with the replies, 90 days after the wedding, or sooner if the couple removes you from the list or deletes the wedding. |
What the wedding planner keeps
| Data | If the couple has a wedding planner on webding, the planner can keep, for each wedding, a note of their own (for example, something they need to remember about the wedding), with a date to review it, and private appointments (day, time, place and what it is). webding also records for the planner what happens in the wedding (who has added guests or ticked off a task, how many replies have arrived or the name of someone who can't come), with the email of the account that did it. Never allergies, messages or phone numbers. In their account the planner can also keep templates to use in several weddings: tasks, the schedule for the day and their trusted suppliers (with their contact person, phone and email). |
|---|---|
| Purpose | So that the wedding planner can organise the weddings they handle. |
| Who sees it | Only that wedding planner. The couple, the guests and webding's administrators do not see the planner's notes, private appointments or templates. Whatever the planner adds to a wedding with a template becomes part of that wedding, and the couple can see it. |
| How long | Notes and private appointments are deleted when the wedding is deleted or when the couple stop having that planner. What happens in the wedding is kept for 90 days. Templates are kept until the planner deletes them or their account. |
Guestbook
| Data | Your name and the message you write in a wedding's guestbook (if the couple has turned it on). |
|---|---|
| Purpose and legal basis | So the couple and their guests can read your message. Legal basis: your consent when you send it. |
| Who sees it | The couple and, once the couple approves it (or if they chose to publish without reviewing), anyone with the link to the wedding website. |
| How long | It's deleted together with the replies, 90 days after the wedding, or sooner if the couple deletes it or deletes the wedding. |
Notifications on your phone
| Data | If you turn on notifications in «Notifications», the push address your browser creates for that phone or computer (with its keys), when it was turned on and which types of notification you have turned off. Notifications carry the couple's names, the name of whoever replies and how many are coming, who left you a message in the guestbook (not the message) or which payment or deadline is due: never allergies, menus or messages. |
|---|---|
| Purpose and legal basis | Letting you know what's new about your wedding. Legal basis: your consent when you turn them on, which you withdraw by turning them off in «Notifications» or removing the permission in your browser. |
| Who sees it | The notification travels encrypted through your browser's push service (Google, Apple, Mozilla or Microsoft), which delivers it without being able to read it. |
| How long | Until you turn them off, the address expires or you delete your account. |
Ideas and comments
If you send us an idea, a comment or a problem, we store the text, the type, the page you sent it from and, if you give it (or if you're logged in to your account), your email, so we can reply. We only use it to improve the service. Legal basis: our legitimate interest in improving it and in dealing with what you tell us. It's deleted when it's no longer needed and, at most, after 2 years, or sooner if you delete your account.
Providers that process data on our behalf
| Cloudflare, Inc. | Website hosting, database, encrypted backups and anti-bot protection (Turnstile). It's a US company that has joined the EU-US Data Privacy Framework and signs the European Commission's standard contractual clauses. |
|---|---|
| Resend | Sending the emails to confirm the account and recover the password and, if the couple asks for it, their invitation to the guests on their list, from servers in Ireland (EU). |
| Only if you choose «Continue with Google»: Google confirms who you are and sends us your email and your name. Google Ireland Limited (EU); governed by Google's privacy policy. | |
| Your browser's push service | Only if you turn on notifications on your phone: your browser's service (Google, Apple, Mozilla or Microsoft) delivers the encrypted notification without being able to read it. |
| Geoapify | Turns the address of the ceremony and the reception into coordinates to draw the website's map (a company in Germany, EU). It only receives those addresses: never account or guest data. |
We don't sell or share data with third parties, or use it for advertising.
Security
Everything travels encrypted (HTTPS). Access is with single-use links and protected cookies. To see the replies you need to have logged in less than 12 hours ago, and backups are stored encrypted and deleted after 30 days.
Cookies
We only use a technical cookie to keep you logged in to your account. There are no advertising or third-party analytics cookies, which is why there's no cookie banner.
Your rights
From «My weddings» you can download all your data and delete the account at any time. You can also request access, rectification, erasure, objection, restriction or portability by writing to hola@webding.es.
If you're a guest, you can contact the couple who invited you or write to us and we'll pass it on. If you think we're not handling your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).