Privacy policy

Version of 2026-11-06

General policy

This Privacy Policy explains how Matcha Wedding (“we,” “us”) collects, uses, keeps and shares information obtained through matcha.wedding, the wedding websites created on it, the couple’s dashboard and other related services and tools (together, the “Services”).

By using the Services, you agree to this Policy. If you do not agree with it, do not use the Services.

Who is responsible for the data

We process the account data of couples, editors and Providers, payment data and messages sent to us as the responsible party.

Guest data on a wedding website is collected by the event’s Owner (the couple, or the Provider who created the Event): the Owner decides which questions to ask guests and how to use the replies. We keep and process this data on the Owner’s behalf so that the site works, and do not use it for other purposes.

What information we collect

We collect personal information only when you give it to us or use the Services. Do not send us personal information about others without their permission.

Couple and editors: name, email, phone number (if given), sign-in method (for example, Google or Apple), wedding details (the couple’s names, date, venue, schedule, story), the site’s photos and texts, and site settings.
Payment: the chosen package, amount, date, status and payment reference. Card details are processed by the payment provider; we do not receive the full card number.
Guests: invitation replies (name, whether the guest is coming, party size, wishes and answers to the couple’s questionnaire), photos uploaded to the album and the upload time, wish list reservations and the name if the guest left it, and the personal invitation link if the couple sent one.
Providers who create Events: account and profile data under the Matcha Events privacy policy, and the data of the Events they create.
Messages: the name, email, subject and text of a message sent through “Contact us”.
Technical data: IP address, browser and device type, pages and time of access, cookies and similar technologies needed for signing in and for the site to work, and analytics cookies (see “Analytics and cookies”).

How we use information

to create, show and support wedding websites and their modules;
to show guest replies, photos and reservations to the couple, editors and the Owner;
to accept package payments and keep payment records;
to send service messages: reminders before a site is deleted, data download links, replies to your messages;
to protect the Services from fraud, spam and abuse and to fix failures;
to improve the Services based on anonymized or aggregated statistics.

We do not sell personal data and do not use guest data for advertising.

Legal bases for processing

We process personal data to provide the Services and perform our agreement with the couple, to comply with the law (including payment accounting), on the basis of consent (for example, when a guest replies or uploads a photo) and for our legitimate interests — security, fraud prevention and improving the Services.

Who sees data on a wedding website

Anyone with the link to the site sees the content the couple published.
Other guests of the site see guest photos as soon as they are uploaded. The Owner and editors can hide or delete any photo.
The event’s Owner and editors see guest replies and can download them.
On the wish list the couple sees that a gift is reserved, and the guest’s name (if left) only after the wedding.

Account security and access logs

To protect accounts and the Services, we record access events (sign-up, sign-in, password change, account deletion): the event type, account, sign-in method, IP address, browser or app and time. Passwords and sign-in tokens are never stored in these records. Our servers also record a technical line for every request to our API, without what you entered. This data is used only for security, abuse prevention, fixing failures and support.

Analytics and cookies

To understand how visitors find matcha.wedding and use the couple’s dashboard at my.matcha.wedding, we use Google Analytics 4, a web analytics service by Google (Google Ireland Limited and Google LLC). Couples’ wedding websites (*.matcha.wedding addresses) do not use Google Analytics.

Google Analytics receives:

the pages viewed, without wedding identifiers, invitation links or payment numbers in the address, and where the visit came from, including advertising campaign UTM tags;
browser and device type, language and approximate location (country, city), which Google derives from the IP address; Google Analytics 4 does not store IP addresses;
actions on the website and in the dashboard: choosing a package, signing up and signing in (only the sign-in method), creating a wedding, starting a checkout and paying for a package (the package, the amount and the payment number).

We do not send names, emails, phone numbers, wedding details, guest replies or photos to Google Analytics, and we do not use this data for personalized advertising.

Cookies on the matcha.wedding domain (shared by the website and the dashboard, so that one visitor is counted once):

“_ga”: a random browser identifier for Google Analytics, up to 2 years;
“_ga_<identifier>”: the state of the current visit for Google Analytics, up to 2 years;
“mw_utm”: our own cookie with the source of the first visit to the website (UTM tags, gclid), so that we know which campaigns bring couples; 90 days.

We use this data only as aggregated statistics, based on our legitimate interest in improving the Services and measuring advertising. Data in Google Analytics is kept for no longer than 14 months. Google may process it on servers outside Ukraine, including in the United States. How Google uses data from sites that use its services: policies.google.com/technologies/partner-sites.

How to opt out: block or delete cookies in your browser settings, or install the browser add-on that turns off Google Analytics. The website and the dashboard work without these cookies.

How long we keep data

A wedding website and its data — guest photos, guest replies, the wish list and reservations — are kept until the end of the site’s lifetime: 7 (Free), 30 (Standard) or 90 (Premium) days after the wedding date, and then deleted permanently.
Account data is kept while the account exists; after an account is deleted we delete or anonymize it, except data the law requires us to keep.
Payment data is kept as long as accounting law requires.
Access events are kept for 90 days; request logs for 30 days.
Messages are kept as long as needed to reply and resolve the matter.

Backups may be kept for a limited time after deletion until they are overwritten.

Your privacy rights

Depending on your jurisdiction, you may request access to, correction, deletion or restriction of processing of your personal data, and object to certain processing.

Guests can contact the couple or write to us at support@matcha.wedding: we will help or pass the request to the event’s Owner. We may ask you to verify your identity before handling a request.

How we protect your information

Data is transmitted encrypted (TLS) and access to it is restricted. However, no storage or transmission over the internet can be 100% secure, so we cannot guarantee the absolute security of your information.

Children’s privacy

Only adults may create sites. We do not knowingly collect personal data from children. If you believe a child has given us data, write to us so that we delete it.

Changes to this Privacy Policy

We may update this Policy. A new version is published on this page with its date at the top. If the way we use personal data changes, we will tell you by email or another reasonable means.

Contacts

Send privacy questions and data requests to support@matcha.wedding.