Legal
Privacy
What we know about you and your guests, why we know it, and how long we keep it. No regulation copied out — just what actually happens in this product.
Current version dated 26 August 2026.
Who the controller is
The controller of personal data processed in WeddUniverse is:
Little Wolf Consulting s.r.o.Mánesova 649, Uherské Hradiště
Company no.: 07813295
info@wedduniverse.cz
What we process
This is the complete list. We collect nothing else about you, and we neither buy nor enrich data from other sources.
| Data | Why | How long |
|---|---|---|
| Email, password (as a hash), name from a Google or Apple account | So you can sign in to your wedding. | Until you delete the account. |
| The couple’s names, date, venue, style, budget, tasks | It is the content you use the product for. | Until you delete the wedding. |
| Guest names, emails, phone numbers, notes, seating | So you can invite people and organise the day. | Until you delete the guest or the wedding. |
| A guest’s answer, dietary preferences, allergies, accommodation, transport, answers to your own questions | So the couple know who is coming and what to serve them. | Until you delete the guest or the wedding. |
| Uploaded photographs and who uploaded them | The wedding gallery, and letting a guest remove their own. | Until you delete the photograph, the album or the wedding. |
| The invited address and hashes of the invitation tokens | So an invitation works, and works exactly once. | 90 days from issue, after which it is void. |
| A record of changes to the wedding: who, what and when | So the couple can see what happened. | Until you delete the wedding. |
| Name, email and the text of a contact-form message | So we can reply. | At most 12 months after the reply. |
Where the data lives
Both the database and the photographs are stored in the European Union. The database runs on Firestore in the europe-west10 region; photographs are in European Cloudflare R2 storage.
The processors we use: Google (Firebase Authentication and Firestore), Cloudflare (photo storage), Vercel (running the application) and an email provider for sending messages. None of them receives data for purposes of their own.
Your rights
Under the GDPR you have the right to:
- know what data we process about you,
- have inaccurate data corrected,
- have your data erased,
- restrict processing,
- receive your data in a machine-readable form,
- object to processing,
- complain to a supervisory authority.
To exercise any of these, write to info@wedduniverse.cz. We answer within one month at the latest.
Guests, and the couple’s responsibility
Guest data is entered and controlled by the couple. We process it on their behalf under a processing agreement and use it for nothing else. If you are a guest and want your data changed or removed, ask the couple first — or write to us and we will pass it on.
How the data is protected
Only the people a couple invite can reach their wedding. Every access decision is made by the server, never by the browser. The database is closed to clients entirely, and a photograph in a private album can be opened only through a temporary signed link. We do not store passwords — Firebase Authentication handles signing in.