somethingprettyUpdated 26 October 2026
Your private planning information
Wedding details, budgets, guest lists, dietary and access notes, supplier quotes, tasks and calculator scenarios are processed in your browser. The wedding plan uses session storage to retain changes while navigating in the same tab. Choose Save on this device for persistent browser storage. Clearing browser data, private browsing, a different device or browser restrictions can remove access.
The venue comparison retains its separate existing local-storage record. Imported quote text is parsed locally; it is not sent to an AI model. Document references store only the labels and notes you enter, not uploaded files. Use the plan settings to export, restore, stop persistent saving or delete local wedding data.
Guest details deserve care
Add only information you need and have an appropriate basis to hold. Let guests know how dietary or access details will be used. Anyone able to use your browser profile may see a saved plan. Full backups and guest CSV exports can contain sensitive details; keep them securely and share only what is needed. The private wedding workspace remains local unless you explicitly upload a full snapshot to an optional cloud project. A separate optional hosted guest page publishes only the fields you explicitly approve.
Optional analytics
Google Tag Manager and Google Analytics load only after you allow analytics. Page visits and allowlisted engagement events can then be measured on public pages. Wedding workspace routes under /plan/ are excluded even when analytics is allowed. Quote contents, guest names, private notes, exact budget figures, form values and search queries are not sent by our measurement code. Advertising consent remains denied. Change your choice using Analytics choices in the footer.
Hosting and links
Hosting providers process ordinary request information such as IP addresses and page requests to serve and secure the site. Public directory links take you to independent businesses with their own privacy practices. Homepage photography is served with the site. No email-based customer account, AI provider or payment service is enabled. Optional household RSVP collection is described below. The separate Guest Concierge and Quote Observatory services under /hosted/ use server storage as described below.
Optional hosted guest pages and quote observations
The /hosted/ service stores approved guest-page fields and manually reviewed quote observations in a dedicated Cloudflare database. Guest links are readable by anyone holding the link; they are excluded from search indexing. A separate random edit key authorises page management; only its hash is stored. Keep your key securely: no email recovery exists. Revoke the public link at any time; downloaded copies cannot be recalled. Guest pages expire after 18 months. No RSVP, guest list, dietary information or document uploads are collected there.
Quote contributions require explicit consent and contain category, state, quote month, guest/coverage bands, GST treatment, quoted amount and de-identified inclusion notes. They start pending; the operator reviews before publishing. A private withdrawal key permits withdrawal. Pending/rejected/withdrawn entries expire after 90 days and approved entries after two years. Consent version and review dates are retained with the entry. Short-lived hashed network identifiers enforce hourly abuse limits; hosting providers may process ordinary request logs. No analytics or advertising runs on hosted management, contribution or guest pages. For removal or misuse reports, send the public link to our contact mailbox.
Optional shared projects, household RSVPs and photo albums
Creating a cloud project uploads an approved full wedding-plan snapshot to our Cloudflare database. It may contain guest names, notes, budget, supplier, dietary or access details you entered. Obtain permission for sensitive information before uploading it. Random owner, editor and viewer possession keys control access; the database stores key hashes. Editors and viewers can read the full snapshot. Only owners manage invitations and revocation. Keys are held in the current browser tab session, can be forgotten there, and are not included in plan backups. No email identity checks or recovery are offered. Updates are manual, with revision checks to prevent silently overwriting another planner. Local edits never automatically upload.
Each household RSVP link exposes only that invitation’s selected names and latest attendance and meal choices. Its key is in the URL fragment, then moved to this tab’s session storage and removed from the address bar. Guests approve sending responses to the host. Do not enter allergies or health details in the meal field; discuss those privately. Owners can revoke invitations and review and import responses locally. No emails are automatically sent.
Optional photo albums use the existing Cloudflare database as a bounded pilot: 30 photos and 3 MB per album, 100 KB per JPEG and 100 MB of shared photo storage across the service. Photos are resized to at most 1200 by 1200 pixels and re-encoded before upload. The server rejects embedded metadata segments. Uploaders confirm permission from the photographer and people shown. A separate upload key permits submissions without browsing; a viewer key permits approved photos only. The owner reviews photos and may approve, return to pending or remove them from viewers. Removed photos remain privately recoverable by the host until album expiry and count towards limits. Do not upload sensitive images. Keep original files and separate backups.
Projects, invitations, responses and albums expire after 18 months; the daily scheduled retention sweep removes expired records and images. Revocation disables access immediately but retains the private record until expiry. Holders may retain downloaded copies. Short-lived hashed network identifiers limit abuse. Hosting providers may process ordinary network requests. Online private workspaces and guest portals do not load analytics or advertising. Contact the site operator for privacy or misuse reports; do not email full private plans or guest lists.
Share cards and new tools
Decision-room calculations and previews are device-local. Hiding a partner’s on-screen weights does not encrypt them from someone using the same device. Share cards default to redacted text; optional summaries are shown before download. Referral links contain only a public tool address and an allowlisted source label, never entered figures or names.
Contacting us
Email you choose to send reaches the site operator through the published contact mailbox and configured email services. Do not email guest lists, identity documents, private contracts or payment details unless a suitable process has been agreed. For privacy questions or corrections, contact contact@somethingpretty.com.au.
This notice describes the implemented service; it does not claim that publishing a policy establishes legal compliance for every future business model.