# Privacy policy > Privacy policy of Seating Solver: no cookies, anonymous statistics, guest data stays in your browser. Cloud storage in the EU only if you sign in. Source: https://seatingsolver.com/privacy/ · As of: 2026-10-31 · Seating Solver Last updated: October 31, 2026 ## 1. Who is responsible Seating Solver, Switzerland · Email: hello@seatingsolver.com We run the website seatingsolver.com and the planning tool for wedding seating charts. This policy applies to visitors in the European Union and European Economic Area (GDPR), the United Kingdom (UK GDPR and Data Protection Act 2018), Switzerland (revised Federal Act on Data Protection, revDSG) and the United States. ## 2. Short version - We use no cookies and no advertising networks. We count anonymously how often pages are viewed and which steps of the planner are used. This does not recognize you or your device. - You get a newsletter only if you tick the box yourself. - Without an account, your guest lists and plans stay in your browser on your device (local storage). We do not receive them. - You can sign in voluntarily (Google or an email link). Then your plan is also saved in the EU (Frankfurt) with our provider Supabase, so you can use it on several devices. - With an account you can turn on a link to your seating chart (“Shared links”, section 5a). It is off by default and never shows notes or remarks about guests. - PDFs are created in your browser, not on our servers. The free templates are ready-made files for download. - Like every website, our host creates server logs when you open a page. ## 3. Hosting and server logs The website is hosted by Cloudflare (Cloudflare, Inc., USA, and affiliated companies; service Cloudflare Workers). When you open a page, the host processes technically necessary data, for example your IP address, date and time, the page requested, browser and operating system, to deliver the page and to block abusive requests. Our legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR and UK GDPR; processing in good faith under the revDSG). Logs are kept according to the host’s rules and then deleted. Data may be transferred to the USA. ## 4. Guest lists and plans without an account: only in your browser When you use the planner, your browser stores guest names, groups, rules, tables and settings in local storage on your device. This data is not sent to us or to third parties. We cannot see or restore it. It stays until you delete it or clear your browser data. With the “save backup” function you create a file on your device. That file is your responsibility. Remember that you process the names of your guests: share them only with people who may know them. Seating Solver does not ask for health information. For special seating needs you choose only the placement (for example “near the entrance” or “near the head table”), not the reason. ## 5. Account and cloud storage (optional) You can use the planner without an account. If you sign in voluntarily, we process your email address, a user ID, the times of sign-in and saving, and your plan (guest names, groups, rules, tables, room plan, meal choices, optional seating needs such as “near the entrance”, notes, settings) to store it for you and sync it between your devices. The legal basis is performance of the contract for use of the service (Art. 6(1)(b) GDPR and UK GDPR). The data is held by Supabase, Inc. (USA) on servers in the EU (Frankfurt am Main). Supabase acts as our processor. Your sign-in state is stored in your browser’s local storage, not in a cookie. Only you can read your plan; access is technically separated per account. **Sign-in with Google.** You are redirected to Google (Google Ireland Limited). Google sends us your name, email address and, if available, your profile picture. What Google itself processes is described in Google’s privacy policy. **Sign-in with an email link.** We send a sign-in link to the address you give, through an email delivery provider. **Optional details in your account.** The occasion and date of your event, if you enter them. We use them to show relevant tips and for anonymous statistics (for example, how many events are planned per month). You can change or clear them at any time. You can delete your account in the planner at any time (menu, “Delete account”). This deletes the account and the cloud copy. The copy in your browser stays until you delete it there. Remember that you store the names of your guests: only save data you may use for this purpose. ## 5a. Shared links (optional, account only) With an account you can turn on two links. Both are off by default. The **plan link** (address /plan/) shows the room plan (table positions, dance floor and so on), all tables with guest names in seating order, and meal choices. The **guest link** “Find your seat” (address /seat/, meant for the QR code on the poster) lets a guest type their name and then shows only their own table and the names at it (at most three matches, search from three characters). It does not show a list of all guests. Someone who has the link and tries many names can, however, learn about other tables step by step, much as on a printed seating chart at the entrance. **What is stored.** We keep a cleaned snapshot in the database: names, table names, seats, for the plan link the meal choices and room plan, and, if you enter them, the names of the couple and the date. It never includes notes, remarks, seating wishes (for example “near the entrance”), groups or rules. The snapshot is renewed each time you save to the cloud while the link is on. **Who can see it.** Everyone who knows the link. The link contains a random key (128 bit) in the part after the hash sign (#). Browsers do not send that part to our host, so it does not appear in the host’s logs. The pages are blocked from search engines (noindex) and are not linked. When a page is opened, it fetches the data from Supabase (EU, Frankfurt); Supabase technically sees the IP address. We count anonymously how often a link is switched on and the guest link is used (no names, no identifier). **How long.** The link expires 30 days after the date of the event if you entered it in your account, otherwise one year after you turn it on. After that it returns nothing. You can switch it off at any time (the snapshot is then deleted), create a new link (the old one stops working immediately) or delete your account (the links are deleted too). **Legal basis and responsibility.** Processing happens at your request (Art. 6(1)(b) GDPR and UK GDPR) and to protect our legitimate interest in secure operation (point (f)). You make your guests' names accessible yourself: you are responsible for informing your guests and for giving the link only to people who may know it. ## 6. Sign-in with Google: which Google data we use **Data.** If you choose “Sign in with Google”, we receive only your Google account ID, email address, name and, if available, profile picture (scopes “openid”, “email”, “profile”). We do not access other Google data such as contacts, calendar, Drive or Gmail. **Purpose.** To sign you in, recognize your account and link your plan to it. We use your email address for news only if you tick the newsletter box yourself. We do not use the data for third-party advertising, profiling or training AI models. **Sharing.** We do not sell the data and do not pass it on to third parties. It is stored only with our processor Supabase (servers in the EU, Frankfurt am Main). **Retention and deletion.** Until you delete your account. You can do this at any time in the planner (menu, “Delete account”) or by email to hello@seatingsolver.com. You can also revoke access in your Google account under “Third-party apps with account access”. **Limited Use.** Seating Solver’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. ## 7. PDF creation Posters, place cards and table numbers from the planner are created locally in your browser. Guest data does not leave your device when you do this. ## 8. No cookies, anonymous statistics, newsletter We use no cookies, no advertising networks and no services that follow you across websites. That is why there is no cookie banner. **Page statistics.** We use Umami Cloud (Umami Software, Inc., USA). A small script reports page views and planner steps (see below): the page viewed (without personal parts of the address; only campaign tags such as utm_source remain), the referring page, country, language, browser, operating system, device type and screen size, and the time, from which time on page and bounce rate are derived. Umami sets no cookies and stores nothing in your browser. To group page views into one visit, Umami creates an irreversible hash from your IP address and browser identifier combined with a regularly changing random value; the IP address itself is not stored, and after the value changes, a visit can no longer be linked to earlier ones. We see only summed numbers, not individual people. Data is deleted after at most 6 months. Data may be transferred to the USA. **Usage statistics in the planner.** The planner reports individual steps to our database at Supabase (EU, Frankfurt) and to Umami, for example “planner opened”, “seats assigned”, “PDF created”, with only: the site version (English), whether you are signed in, and which page or domain you came from. No guest data, no user or device identifier, no IP address in the table. Technically, Supabase briefly sees your IP address in its logs. **Paper size.** The planner chooses a default paper size (US Letter or A4) from your browser’s language setting. This happens on your device. The setting is not sent to us. The legal basis for both statistics is our legitimate interest in improving the service (Art. 6(1)(f) GDPR and UK GDPR). You can object by email to hello@seatingsolver.com; an ad blocker also stops the statistics. **Newsletter.** Only if you tick the box in your account (consent, Art. 6(1)(a) GDPR and UK GDPR). We store the time and wording of your consent as proof. You can unsubscribe at any time in your account or with the link in every email. ## 9. Contacting us If you write to us, we process your email address and the content of your message to reply. The legal basis is Art. 6(1)(b) or (f) GDPR and UK GDPR. We delete messages once the request is dealt with and no retention duty applies. ## 10. Recipients and transfers to other countries Recipients are only our host (Cloudflare), Umami (page statistics), Supabase (storage in the EU; account and anonymous usage statistics), and Google or the email provider for sign-in. If we introduce payments, the payment provider will be added. Cloudflare, Umami and Supabase are US companies; data may be transferred to the USA. We do not sell data. ## 11. Your rights Where the law provides for it, you have the right of access, rectification, erasure, restriction of processing, data portability and objection (Articles 15 to 21 GDPR and UK GDPR; Articles 25 ff. revDSG). Write to hello@seatingsolver.com. Without an account we do not hold your guest data and cannot give access to it; it is on your device, where you can delete it. With an account you can delete your plan and account in the planner yourself. You can complain to a data protection authority: in the EU, the authority of your country; in the UK, the Information Commissioner’s Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). **Visitors from the United States.** We do not sell your personal information and do not share it for cross-context advertising. If a US state privacy law gives you rights (for example access or deletion), write to hello@seatingsolver.com and we will deal with your request. ## 12. Security The website is delivered over an encrypted connection (HTTPS). ## 13. Changes We update this policy when features or the law change. The version of the date above applies.