Privacy

Tadavite is run by Wild Hearts Publishing Pty Ltd, Australia. Last updated November 2026.

What we keep

Hosts: the event details you type (name of the event, date, time, venue, address, dress code, notes, your first name). You don’t need an account or an email address to create an invitation.

If you sign in: signing in is optional. We keep your email address, a record of the sign-in links we sent you (stored as one-way hashes, so the links themselves can’t be recovered), and your sign-in sessions. If you add an event to your account, we link that event to your email address.

Guests: the name you give, your reply, how many people you’re bringing, any dietary needs or allergies you choose to share, and any note to the host.

Payments: when you pay for an invitation, Stripe processes the payment and gives us your email, the amount, the currency and whether it succeeded. We never see or store card details.

Who sees it

Event details are visible to anyone with the invitation link. Replies, including dietary notes, are visible only to whoever holds the private host link, or to the signed-in account the event is attached to. We don’t sell data, show ads on invitations or share replies with anyone else.

Dietary and allergy notes can count as health information. We collect them only when a guest chooses to enter them, and use them only to show the host.

Cookies and storage on your device

We use a small number of cookies, only to make the site work: one per event you manage, so you can get back to your host page (kept up to 180 days), and one that keeps you signed in if you sign in (kept up to 30 days). They are HttpOnly and not readable by scripts on the page. The site doesn’t include advertising or analytics scripts. If you install Tadavite to your home screen, a small service worker stores one offline page and nothing about your events or replies. Our hosting provider keeps ordinary server logs.

Email

If you sign in, we email you a sign-in link through Resend, our email provider, which processes your email address to deliver it. Sign-in emails contain the link and nothing about any event.

The iPhone app

The Tadavite app shows the same pages as this website, so everything on this page applies to it too. On top of that:

Notifications. If you turn on notifications for an event, we keep your phone’s notification address (a code from Apple, or from Google on Android, that lets us send a notice to that phone) and the events you chose. We use it only to tell you when someone replies or something changes. You can turn notifications off in your phone’s Settings, and the address is deleted when the event is deleted.

On your phone. The app keeps a copy of today’s plan on your phone so it works without a connection, and sets its step reminders on the phone itself. Nothing else about your events is stored on the phone.

Buying in the app. Purchases in the app are made through Apple on iPhone and Google Play on Android. They handle the payment and we never see your payment details. They send us a record of each purchase (what was bought, the price, the currency, the date and their transaction number), and we keep it with the event or card it paid for. If a purchase is refunded, we are told and we note it.

No tracking. The app doesn’t load any analytics or advertising tags.

Ideas and offers by email

Only if you ask: the box is never ticked for you. If you tick it when signing in, we record it once you use the sign-in link; if you tick it when sending an e-card, we email you to confirm first; you can also switch it on or off under Account. We keep your email address, where you asked, and when you agreed or stopped. We send a couple of emails a month at most, through Resend, our email provider, and never share your address with anyone else. Every email has a link to stop them, and deleting your account removes you from the list.

“Tell me when it’s out”

If you type your email into “Tell me when it’s out” for the Elf Unhinged iPhone app, we email you a link to confirm first, and nothing is recorded as agreed until you press it. Then we send one email when the app is in the App Store, and nothing else unless you ask. This is a separate list from ideas and offers: it doesn’t sign you up for those. We keep your email address, where on the site you asked, and when you asked, agreed or stopped. The email goes through Resend, our email provider, carries a link to take you off, and we never share your address with anyone else. Deleting your account removes you from this list too.

Invitation links

Invitation and host pages are hidden from search engines. Anyone you forward a link to can open it, so share host links carefully. We store host links only as one-way hashes, so a leak of our database would not reveal them.

Planning tools: what we keep

Household replies. When you reply to an event that uses household replies, we keep the household name, an optional contact email, each person’s name and age band (adult, teen, child, under 3), their answer for each gathering, an optional arrival time, and any dietary or accessibility notes you type. We also keep a history of changed answers so the host can see what changed and when. Your edit link’s secret is stored only as a one-way hash.

Things you bring, lifts and stays. What you offer to bring or do, with your status (done, running late, need help); lifts you offer or ask for (seats, where from, a note); a request to stay over (people, nights, a note) and the host’s answer.

Secret Santa. If you join a gift exchange you sign in with your email, so we keep that email, your display name in the exchange, an optional “keep apart” word, and your wishlist. We keep who was drawn to give to whom. The app shows that pairing only to the giver, only after the host releases it, and never to the host. Someone with direct access to our database could technically read it; we limit what the app and our support tools show, and we do not claim more than that.

Costs. If the host records costs, we keep what things cost, who paid, and the split the host works out: your share, what you owe or are owed, and what you have said about it (agreed, disputed, sent, received). We never hold bank details or payment links, and no money moves through Tadavite.

Accounts and co-hosts. If you keep a reply or an event on your account we link it to your email address. Co-hosts are named by email by the event’s owner; we keep that email and what the co-host may see.

Audit log. For sensitive actions (signing in, changing or deleting a reply, a host removing someone’s claim, drawing or releasing Secret Santa names, working out or acting on a cost split, exporting or deleting an event) we keep who did it (by id), what, and when. Never the content.

Notices and reminders. If a host asks to be emailed when someone replies, or a Secret Santa is released or changed, or you are named a co-host, or you ask for updates and a reminder the day before, we queue a notice holding ids only and look your address up when it is sent.

Planning tools: who sees it

The host and any co-host see household names, answers, arrival times, what people bring, lifts, stays and costs. Dietary and accessibility notes, and cost records, are shown to a co-host only if the host allows it. Other guests see nothing of yours, except: when the host pairs your lift with someone’s car, each of you sees the other’s household name and contact email; on a cost split, the person you pay or who pays you sees your household name. The host never sees Secret Santa pairings, wishlists or who is in the exchange; only counts.

Photos, gift lists, polls and guest emails

Photo album. If a host turns on a photo album, guests can add photos and, if they choose, their first name. We remove location and camera details from every photo when it’s added. Photos in an album can be seen by anyone with the invitation link. A guest can delete their own photos, and the host can hide or delete any photo.

Reporting a photo. Anyone viewing an album can report a photo. It’s hidden straight away, and we keep the reason given, if any. The host and Tadavite are emailed so it can be looked at.

Gift list. We keep the gifts the host lists and which ones are reserved. Guests never see who reserved what. The host sees reservers’ names only if they choose to.

Date poll. If a host asks guests to choose a date, we keep each guest’s name and the dates they picked, and show them to the host.

Saved people. A signed-in host can save guests’ names and email addresses to invite them again. Hosts never see email addresses that guests type into their own replies.

Guest emails. If you tick to get updates when you reply, we email you the host’s messages and a reminder the day before. Every email has a link to stop them for that event.

Invited (your list of parties). If you sign in and use Invited, we keep the parties on your list. You can add one yourself, keep one we suggest, or we add one automatically when you have replied to a Tadavite invitation from this browser while signed in. For each party we keep the party’s name and kind, the date, time and place, the host’s name, the date to reply by, your answer (yes, no or maybe), your gift and lift notes, and any other notes you type. For a Tadavite invitation these details are copied from the invitation and kept up to date with it. Notes are free text, so leave out anything you would not want kept, such as health details. The host never sees this list and we send nothing to a host for you, though the people who run Tadavite and our hosting providers can technically reach the database. If you tell us a suggestion is not yours, we keep a hidden note of it so it does not come back. Reminders are on for each party unless you switch them off for it. Through Resend, our email provider, we email you three days before the reply-by date (only if you have not replied) and on the morning of the party (not if you said no). The email carries the party’s name, the time and place, and a link to pause all party reminders without signing in. We keep a party until you remove it or delete your account, and past parties stay on your list until you do. A reply someone else made with your email address is only added if you say so. Deleting your account deletes the list.

Children

Household replies may name children (name and age band only, entered by an adult in their household). Secret Santa needs a verified email, so only an adult with an email can take part; we do not offer accounts to children. An adult who has joined a gift exchange from their household may enter a child from that household (first name only). The child’s match is shown to that adult and to no one else.

In Invited, a parent may type a name for a child (we suggest a first name or nickname) so they can tell which party is whose. It is optional free text, is shown to nobody but that parent, and is kept until the party is removed or the account is deleted. This name is never put in an email or a calendar file. The party’s own name is, though, so if you put a child’s name in the party’s name it will appear in the reminder email and the calendar file. We ask for no age, school, photo or surname, and nothing is collected from a child.

Cards sent to other people

People you add. When you send a card to someone through Tadavite, or build a list of people to send cards to, we keep what you give us about them: their name, email address, and, if you add them, their relationship to you, country, time zone and a setting for how cheeky a card may be. We hold this for you. We use it only to send the cards you ask us to send, to show you what happened to each one, and to avoid sending to anyone who has asked us to stop. We don’t use it to market to them, and we don’t sell or share it. Please only add people you’d send a card to anyway.

Sending on your behalf. The email is sent by Tadavite for you. It says who it’s from, replies go to you, and it carries no advertising. It’s a personal message from you, delivered by us.

What we record about each card. When it was sent, whether it was delivered, bounced or marked as spam, and whether the person opened their private link, when, and how many times. We don’t use a tracking pixel in the email. If an address bounces or complains, we stop sending to it. We keep a list of addresses we must not send to, which needs the address itself.

If you got a card and don’t want more. Email info@tadavite.com from the address concerned and we’ll stop sending cards to it and, on request, delete what we hold about you. If you’re in the UK or EU you have the rights you’d expect under your local law, and you can use the same address to exercise them.

Your lists. You can ask us to delete any person, or a whole list, at any time. Deleting your account removes your lists.

Photos you upload for a card or story

If you upload a photo so we can make a card or story, we use it only for that, and we make an illustrated version rather than showing the photo itself. Only upload photos you have the right to use. If it shows another person, make sure they’re happy for you to; for a child, you should be their parent or guardian or have a parent’s say-so. We keep the photo only as long as we need it to make your card or story, then delete it, and you can ask us to delete it sooner. We don’t publish uploaded photos in any gallery.

Advent calendars you give

What we keep. For a Luxury Christmas Advent calendar, or a 24 Days of Us calendar, we keep the recipient’s name and (if you give it) email address, your name and greeting, the email address you give Stripe at checkout (only to send you your private link and anything about your order), their time zone and start date, and anything you add to a door: words, photos, voice recordings, links and gift details. Photos are re-encoded when you add them, which removes location and camera details. Photos and recordings are stored privately and only ever shown through a link that works for a minute.

Who sees it. Only you and the person you send it to. They see a door only once its morning has come in their own time zone; nothing behind a door is ever put in an email. You see whether the invitation went and how many doors have opened. You see which doors they have opened, and any reaction or note, only if they choose to share it. Anything they write on the journal page is theirs alone: it is never shown to you.

Photos and voices of other people. When you add a photo or a recording to 24 Days of Us, you tell us you have the right to share it and that anyone in it is happy for it to go to the person you are giving the calendar to. We never send your photos or recordings to an AI service, never use them to train one, and never copy anyone’s voice or likeness. A personalised song, if you order one, is written and recorded by people from what you tell us in words; it is not made from your recordings.

Emails to the recipient. We send them one invitation. A morning email when a door opens goes only if they turn it on, and every one has a one-click link to stop them.

How long we keep it. The calendar’s link stops working at the end of March after Christmas. We delete the calendar, everything added to it and everything they wrote 30 days after that, or 30 days after it is stopped or refunded. A draft that was never sent is deleted after 90 days without changes.

Business lists

If you use Tadavite for a business, you may upload a list of clients or staff, and optional notes about each person so we can help write a personal message. That’s personal information you hold for your business. We use it only to write and send the cards you ask for, on your instructions, and we don’t use it for anything else. Please keep notes to what you’d be comfortable with that person reading, and leave out health, financial and other sensitive details.

Deleting things

A host can export their event, close it to changes, copy it for next year, or delete it, which removes every reply, claim, menu, cost record and the gift exchange. A guest can download their own reply at any time from their reply page. We do not delete old events automatically; we review old events by hand.

You can also email info@tadavite.com from the address you’d like us to reply to, with the invitation link, and we’ll delete the event and its replies. To delete your account, sign in and go to Account, then Delete my account (in the app it’s under the Account tab). It removes your sign-in, the people you’ve saved, your recipes and any Secret Santa you’ve joined, straight away. You can choose whether your events are deleted too; if you keep them, their private host links still work.

Where it’s stored

Our database and hosting providers may store data outside Australia.