Privacy (Draft)

We collect only the PII required to run RSVP and collab forms (name + email). During MVP this data lives in Supabase and can be deleted on request.

Anonymous likes are stored as hashed fingerprints for 24h to fight abuse—never raw IPs. Media uploads pass through virus scanning before they hit storage.

We will publish a full policy with data-retention timelines before soft launch.