Privacy Policy

Last updated: 2026-10-10. Plain-English summary first, specifics below. We keep this short on purpose: we store only what is needed to run your invitation and RSVPs.

The short version

Invitatu requires no child accounts and collects no personal data from children playing the games. Playing a game stores nothing about you except local progress in your own browser. Creating an invitation stores only the party details the host types, and submitting an RSVP stores the guest response for that party's host. Payments for the one-time $4.99 promotional share unlock ($14.99 MSRP) are processed securely by PayPal/Venmo; we never see or store credit/debit card numbers.

What we store

Invitation data. When a host builds an invitation, we store the game configuration entered: the birthday child's first name (as typed), turning age, gender, clothes size, favorite color, party date, time, venue/location text, optional notes, and the selected hero, pet, and world, plus a random invitation code. This data exists solely to render the playable invitation and automatically expires — and stops being served to guests — 2 days after the event date.

Guest RSVP submissions. When a guest submits the built-in RSVP form on a shared invitation ("Will you attend? Yes / No"), we store the submitted Guest Name, attendance choice (Yes/No), guest count, and any optional dietary or guest notes associated with that invitation code so the party host can view their guest list. RSVP records are never sold, shared with third parties, or used for marketing.

Aggregate analytics. We log lightweight page and game events (page view, game played, share-gate shown, share unlocked, invitation created, RSVP submitted) with a page path and coarse timing. Your IP address is used transiently for rate-limiting abuse and is never sold. We use no third-party ad trackers, no advertising pixels, and no cross-site fingerprinting.

Payment & coupon records. If you pay the one-time $4.99 promotional share unlock fee (MSRP $14.99) via PayPal, Venmo, Pay Later, or card, PayPal processes the transaction. We store the PayPal order/transaction ID, amount, coupon code applied (if any), and status so we can verify and honor your unlock. Card details never touch our servers.

Your browser's local data. The games save your highest unlocked level, audio/haptics preferences, language choice (EN/ES), and a signed unlock ticket in your browser's localStorage so progress and paid unlocks persist across refreshes.

Cookies

We do not set advertising or cross-site tracking cookies. Strictly necessary first-party cookies or localStorage tokens are used only for session security and rate-limiting.

Children

Invitatu is a family invitation tool operated by parents/hosts. Children's play sessions create no accounts and require no personal information; the only child-related text is what a parent/host voluntarily enters into an invitation card. We do not knowingly collect personal data from children.

Hosting and subprocessors

Invitatu is self-hosted on dedicated infrastructure. PayPal, Inc. handles payment processing (including PayPal, Venmo, Pay Later, and card checkout). No third-party advertising networks are involved.

Your choices & deletion requests

You may ask us to delete an invitation and all associated Guest RSVPs at any time by emailing support@invitatu.app, including before its automatic post-party expiration.

Changes and contact

If this policy changes materially, we will update the date above. Questions: support@invitatu.app.