Privacy Policy

Last updated: August 30, 2026

What we collect

RSVPs: your name, email, and (optionally) any dietary notes on the cake you're bringing. We use these to plan the event, label the table, and email you its details.
Ticket purchases: handled by Stripe. We receive your name, email, and purchase confirmation; we never see or store card numbers.
The mailing list: if you leave your email on our what's-next page, we store that address, whichever crafts you ticked, the date, and which link brought you to us if you arrived from a poster or an Instagram link. We don't ask for your name and we don't store one.
The photo booth: if you use the booth at an event, the photograph is composed in your browser and emailed to the address you type. We store neither the picture nor the address.
Site analytics: the site sets no tracking cookies.
The venue map: your confirmation page embeds a Google map of the spot. Loading it tells Google your IP address and browser, the same as opening the map yourself would. It is the only third party the site embeds, and it appears nowhere else.
Google Wallet: only if you tap “Add to Google Wallet”. Doing so sends Google your name, your ticket number, and the event details, and the pass then lives in your Google account. Skip the button and none of that happens; your ticket works either way.

How we use it

To run the event you signed up for: confirmations, practical updates (location pins, rain plans), and your ticket. These come with buying something and are not marketing, so they carry no unsubscribe link: the way to stop them is to not have a ticket.

One exception worth naming, because it is the only email we send that you didn't ask for: if you start booking a ticket and don't finish, we send one reminder, once, and it may include a discount. One per person, ever, and never again if you ignore it. Reply to it and we'll leave you alone.

Emails about new events are separate and work the other way round. That covers the mailing list, which you are on only because you asked to be, and the occasional note to people who came to a past event telling them what is next. We write only when there is a real event to tell you about, and every one of those emails carries a one-click unsubscribe link. You can also leave at any time by emailing us. Unsubscribing stops the emails about new events and never affects a ticket you've already bought, its receipt, or the practical note that goes out the week before.

What we never do

We don't sell your data or share it with anyone except the services that run the site: Stripe (payments), Cloudflare (hosting), Google Maps (the venue map on your confirmation page), and Google Wallet (only if you choose to save your ticket to it).

Your rights

Email hello@openinviteto.ca to see, correct, or delete what we hold about you. We're based in Toronto and follow PIPEDA, Canada's federal privacy law. We aim to follow CASL for anything we send about a new event: the mailing list is opt-in only, a note to a past guest goes out because they bought a ticket to one of our events, every one of those messages carries a one-click unsubscribe, and you can always reply and ask.

One thing worth being straight about: when you unsubscribe we mark the record as unsubscribed rather than erasing it, because a deleted record looks exactly like somebody who never signed up, and the next time that address turned up we would start writing to you again. Ask us to erase it outright and we will.