Privacy

AntoniaFazUm is responsible (the controller, in the language of Brazil's data protection law) for the data of whoever organises parties: your email and, if you want, your name.

For the guests' data, the host is the one who answers. It's the host who decides who goes on the list and what gets written there; the site only stores and delivers, as a processor. If you were invited and want off a list, ask whoever invited you — they're the one who can do it. If that doesn't work, write to the address at the end of this page.

• From whoever organises: email, to send the party key, the invitations and the sign-in code. A name, only if you fill it in. We don't ask for a phone number — there'd be nothing to do with it.
• From the party: name, date, address, note, and the photo, if you upload one.
• From the guests: name, email and/or phone, their answer, and the private note when they leave one. All of it is typed in by the host or by the guest themselves.
• To hold back abuse: a temporary record of how many times each visitor repeated an action. The IP address is not kept readable — it becomes a code scrambled with a secret key, which can't be undone.

We use no analytics, advertising or tracking cookies. The site's only cookie is the session one, created only if you choose to sign in with an account.

• The party and the guest list are deleted 90 days after the event, automatically. The photo goes with them.
• Sign-in codes are good for ten minutes and are deleted right afterwards. Sessions last thirty days.
• An account with no parties and no use for 12 months is deleted on its own.
• When a party is deleted, all that's recorded is that it was deleted, when, and by whom — nothing of its content.

Cloudflare, which hosts the site, keeps the database and the images, and delivers the emails. Nothing is sold, handed over, or used for advertising.

There's a second contact, brief and only while you're filling the form in: when you type a Brazilian postcode into the party form, the site's server asks ViaCEP — a public postcode lookup service — for the address. Only the postcode goes. Your browser never talks to it, so neither your IP nor any other data of yours gets there. The postcode field only exists with the site in Portuguese, and not using it avoids that contact entirely.

Brazilian data protection law gives you the right to know what we keep, to correct what's wrong, and to delete everything. Where to exercise each:

• Have an account? In my account you can see everything, download it as a file, change the name and delete the account — right away, without asking anyone.
• No account? Open the party's dashboard with your key: you can edit everything and delete the whole party from there.
• Lost the key and have no account? Use key recovery. Without it, we have no way of telling which party is yours.

Party keys and invitation links are long, randomly drawn secrets, and the pages that use them ask not to be indexed and don't leak the address to other sites. Sign-in codes and sessions are stored scrambled, never readable.

It's worth being blunt about the limit of that: whoever has the key has the access. If you send the key to a group chat, everyone in the group gets in. That's why the read-only key exists, showing the numbers without the private notes — that's the one you send to the caterer.

Questions, requests or complaints about personal data: [email protected].