Privacy policy

Data controller

Thomas Faucher, publisher of Wedding Capsule (see the legal notice), is the controller for the data described below. For any question or request about your data, contact us at thomasfaucher9@gmail.com or via the contact form.

Data collected

• Couple creating a page (account): email address (used for passwordless magic-link login), first names, information entered for the wedding page (date, welcome message, theme color).
• Invited photographer: email address, used only to log in and upload photos for the relevant wedding.
• Guests sending photos: freely entered name (no account), photo(s), optional message. This information is displayed publicly on the wedding page — this is stated before sending. The IP address is stored as a hash (one-way, non-reversible fingerprint) for rate limiting and abuse prevention.
• Guests signing the guestbook: freely entered name and message, displayed publicly. The IP address is stored as a hash to limit one message per household/connection.
• Contact form: name, email and message content, kept for the time needed to handle your request.
• Payment: banking information is entered directly with Stripe, our payment provider; we never have access to it and never store it.

Legal basis and purposes

The couple's and photographer's data are processed for the performance of the contract (providing the Wedding Capsule service). Guest data (photos, messages, name) is processed on the basis of the couple's legitimate interest in centralizing their wedding memories, with clear notice given to the guest before any submission. Contact form data is processed on the basis of your voluntary decision to contact us.

Retention period

Discovery plan: the page and all associated photos are permanently deleted 3 days after the page is created (database and stored files).

Essential plan: the page and photos are permanently deleted 6 months after the wedding date.

Premium plan: the page and photos are permanently deleted 6 months after the wedding date.

Contact messages: kept for a maximum of 3 years from the last exchange.

Recipients and processors

Your data is never sold. It is shared only with the providers necessary for the service to function:

• Hostinger International Ltd — application server hosting.
• Cloudflare, Inc. — photo storage (Cloudflare R2).
• Resend — sending transactional emails (login link, confirmations).
• Stripe — payment processing for the Essential and Premium plans.
• PostHog — web analytics for the marketing site and the couple's dashboard, only if you've consented (see "Cookies" below).

Cookies

Wedding Capsule uses cookies strictly necessary for the service to function: a session cookie for dashboard login, and an anonymous technical cookie that recognizes a guest to prevent duplicate "likes". These cookies don't require consent (CNIL exemption) since they're essential to the requested service.

On the marketing site and the couple's dashboard only (never on the public pages your guests visit), we use PostHog, a web analytics tool, to understand how the site is used and improve it. This tracker is only activated after your explicit consent, given via the banner shown on your first visit — you can change this choice at any time by clearing this site's data in your browser. No data is sent to PostHog until you've accepted.

Wedding page privacy

Wedding pages are never public on the internet in the sense of search indexing: they are excluded from search engine indexing ("noindex" tag and exclusion from the sitemap). Only people with the link or who scanned the wedding's QR code can access them.

Your rights

In accordance with the General Data Protection Regulation (GDPR) and French data protection law, you have the right to access, rectify, erase, restrict, object to, and port your data.

• The couple owning a page can request the complete deletion of their page and associated photos at any time.
• A guest wishing to have a photo, comment, or message they posted removed can contact the relevant couple directly, or write to us — we will forward the request.
• To exercise your rights, write to thomasfaucher9@gmail.com specifying your request and, if possible, the link to the relevant wedding page. We respond within a maximum of one month.

You also have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe your rights are not being respected.

Security

Passwords are never used (single-use magic-link login). Uploaded files are validated (type and size) before storage, and IP addresses are never stored in plain text. Exchanges with the site are encrypted (HTTPS).