Privacy Policy
Last updated 17 October 2026
Hoooray (hoooray.co, "we", "us") helps parents make digital party invitations and collect RSVPs. We handle personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles. This page explains what we collect, why, who we share it with, and how you can ask us to correct or delete it.
Who this covers
- Hosts: the person who creates the party and invitations.
- Guests: the people who open an invitation and reply.
What we collect
From hosts
- Email address (to give you access to your parties and send your dashboard link).
- Party details: the birthday person's name and age, date, time, venue, address, notes, food details, whether it is sensory friendly, how guests should RSVP, and your name and mobile number if you add them.
- The guest names you enter to make invitations.
- Whether you chose to hear about new designs and features, and when you agreed.
- Payment status if you pay for a party. Card details go straight to our payment provider; we never see or store them.
From guests
- The reply (yes or no) and the number of people attending.
- Names of children and any siblings or adults who will attend, if you enter them.
- Allergies and dietary needs, if you choose to enter them. This can be health information, so we only collect it when you give it, use it only so the host can cater safely, and show it only to the host.
- Any message or contact details you choose to add.
Collected automatically
- Basic technical data such as IP address, browser type and the pages requested, which our hosting and database providers log for security and reliability.
- Your browser may store a small amount of data on your device (local storage) to remember your drafts, your host link and your settings. We do not use advertising or tracking cookies, and we do not run analytics that follow you across sites.
- We count visits to understand how the site is used: when you visit, which steps of making an invitation you reach, and which website or device you came from. Each visit is a random code that disappears when you close the tab. It has no name, email address, IP address or cookie attached, and we cannot tell who you are from it.
Why we use it
- To make and show invitations, and to let guests reply.
- To show hosts who is coming and what they need to know.
- To send emails you ask for, such as your dashboard link, and reminders you request.
- To take payment and prevent misuse.
- To keep an anonymous count of parties created and designs used, so we can improve Hoooray. This record has no names, phone numbers or addresses.
- To send news about new designs and features, only if you ticked the box. You can unsubscribe at any time using the link in the email or by contacting us.
We do not sell personal information and we do not show advertising.
Who we share it with
We use these providers to run Hoooray. They may handle information on our behalf, and some are based or store data outside Australia (including the United States and Europe).
| Provider | What for |
|---|---|
| Supabase | Database and sign-in links. Stores parties, guests and RSVPs. |
| Netlify | Hosting the website. |
| Resend | Sending emails such as dashboard links. |
| Stripe | Payments (when payments are switched on). |
| Fonts loaded from Google Fonts, the map on the RSVP page, and the "Add to Google Calendar" link. Google may receive your IP address and the venue or address shown on the map. |
An invitation can be seen by anyone who has its link or QR code, so please share it only with the people you invite. We may also disclose information if the law requires it.
Children's information
Hoooray is used by parents and carers. We do not knowingly collect information directly from children. A child's first name, age and any allergy information are entered by a parent or carer, who is responsible for having the right to share it. Parties are for the host's guests only; we do not use children's information for marketing.
How long we keep it
- Party details, guest names and RSVPs are deleted about 30 days after the party date.
- Hosts can delete a party and its guests at any time from their dashboard.
- We keep a host's email address so they can come back for future parties, until they ask us to remove it.
- The anonymous party count mentioned above is kept, as it identifies no one.
- Payment records are kept as long as tax and accounting law requires.
Keeping it safe
Data is sent over HTTPS and stored in access-controlled databases. Each invitation has its own private code, and each party has a private host key. No system is perfectly secure, so please keep your host link private. If we become aware of a breach that is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as the law requires.
Your choices and rights
You can ask us to access, correct or delete the personal information we hold about you, or to stop sending marketing emails. Email us at the address below. We will respond within 30 days and may need to confirm your identity first. Guests can also ask the host directly to change or remove their reply, or change it themselves with their invitation link.
Complaints
If you have a concern, contact us first and we will try to fix it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If we change this policy we will update the date at the top. If a change is significant we will tell hosts by email or on the site.
Contact
Privacy questions and requests: hello@hoooray.co