Privacy policy

1. Controller

2. Hosting

The application and database run on Hetzner Online GmbH (Germany); emails are sent via all-inkl.com / KAS. Data processing agreements under Art. 28 GDPR are in place with these providers.

3. Data we process

• Guest contributions: optional name/relationship, free text, and photo, audio and video contributions.
• Email address: when a guest saves their contributions or an organiser signs in (magic link).
• Strictly necessary cookies (see section 6).
• Contributions are briefly checked for frequency/suspicious patterns to prevent abuse (rate limiting).
• Transcription (Premium only): For events on the Premium plan, voice and video messages are converted to text (a transcript). A meaningful excerpt may be shown on the Wall of Love and the venue screen. The contributing guest can review and correct the transcript before submitting.

4. Purposes and legal bases

• Providing the guestbook, showing approved contributions on the venue screen and including them in the printed keepsake book — Art. 6(1)(b) and (f) GDPR.
• Media contributions (photo/audio/video) are only sent after the contributor actively consents (Art. 6(1)(a) GDPR, § 22 KUG); the contributor confirms they have the rights and consent of any people shown or heard.
• Sign-in/account and email saving — Art. 6(1)(b) GDPR.
• Security/abuse prevention (moderation, rate limiting) — Art. 6(1)(f) GDPR.
• Transcription of voice and video messages (Premium plan only) for better accessibility and display — based on the contributor’s consent to the media contribution (Art. 6(1)(a) GDPR) and on contract performance and the legitimate interest of the hosting couple (Art. 6(1)(b) and (f) GDPR).

5. Recipients

Approved contributions are transmitted to Meminto (meminto.com) to produce the printed book. For transcribing voice and video messages — only for events on the Premium plan — we use the service AssemblyAI (AssemblyAI, Inc., San Francisco, USA) as a processor; the respective recording is transmitted to the provider’s servers in the USA to be converted to text. This transfer to a third country is safeguarded by the EU Standard Contractual Clauses under Art. 46 GDPR; a data processing agreement under Art. 28 GDPR is in place. Without a Premium plan, no transcription and no such transfer take place. Otherwise we only share data with the processors named in section 2. We do not sell data or use it for advertising.

6. Cookies

We use strictly necessary cookies only (no tracking, no analytics — therefore no consent banner): “mem_session” (organiser sign-in, 30 days) and “mem_guest” (recognising a guest device for their own contributions, up to 180 days). Both are httpOnly and server-side only.

7. Retention

Guest device tokens are stored for up to 180 days, sign-in sessions for 30 days. Contributions (including photo/audio/video and any transcript created) are kept for the duration of the event, the public display and book creation. An event is publicly accessible for 60 days from the wedding date (Wall of Love, gallery); an active subscription extends this period. After that, the Wall and gallery are set to private — the content remains stored and reactivatable for the hosting couple but is no longer publicly accessible. Final deletion takes place upon the request of the hosting couple or an affected guest (mail@meminto.com), or when the account or event is deleted.

8. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and may withdraw any consent at any time with future effect. Contact mail@meminto.com.

9. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority.