Privacy, in plain language

Statement of practice · 2026-07-09 · the formal legal policy ships at launch

Lumaries runs invitations, RSVPs, and event operations for hosts. Guests never create accounts and never see ads. This page says what we do with data — each claim below is how the product is actually built, not an aspiration.

Guest pages are private by default

• Every guest page lives behind an unlisted personal link. There is no public guest list, no name search, and no directory.
• Guest pages tell search engines to stay away — the RSVP host blocks crawling entirely and every guest page carries a no-index instruction.
• Guest pages are served uncacheable and send no referrer information to any other site.

No ads, no trackers, no resale

• Guest surfaces ship no third-party scripts, no analytics beacons, and no ad tech.
• Guest and host data is used to operate the event — invitations, RSVPs, headcounts, dietary needs — and for nothing else. It is never sold, rented, or shared for marketing.
• Invitation emails exist to deliver your invitation; the address book is the host's, not ours.

Data lifecycle

• We keep operational logs minimal: guest link URLs are excluded from our infrastructure's request-log retention.
• When an event is archived, every live invitation link is revoked as a matter of procedure.
• A formal retention and deletion policy ships with the product's public launch. Until then, write to hello@lumaries.events for any data question or removal request.

This public preview and demo run on a synthetic-data stack — no real guest data is stored today. This statement is written in plain language on purpose; the formal legal policy will say the same things in longer sentences.