Privacy Policy

RingCast (https://ringcast.wedding) is a browser-based wedding website template and editor operated by an individual trader:

Vasques Marques
2870-475 Montijo, Portugal
support@ringcast.wedding

RingCast products are sold through the Etsy shop Digitaloja. Etsy holds the seller identification information required for operating the marketplace. Additional legal identification details may be provided to competent authorities or legally entitled parties upon legitimate request.

For the data RingCast itself processes, the operator above is the data controller.

• Your wedding project (texts, settings and photos) is saved in your own browser, not on RingCast servers.
• RingCast stores a small amount of data on its servers to verify your Etsy purchase and, if you choose, to connect your Cloudflare account for publishing.
• Guest RSVP replies go to your own Google Sheet, not to RingCast.
• Published websites are hosted in your own Cloudflare account.
• RingCast uses no analytics, advertising or tracking tools.

The editor keeps your work on your device, using your browser's storage:

• Your wedding project (names, dates, places, story, FAQ, travel details, RSVP settings, design choices) is saved automatically in your browser's local storage.
• Photos you upload are kept in your browser's IndexedDB storage.
• Your activation record (order number, unlocked designs and activation date), your publishing status (project name and website address) and whether you have seen the welcome screen.

RingCast does not receive or copy this content to its servers. Clearing your browser data removes it. Backup files (.ringcast) and website ZIP exports you download are created in your browser and saved wherever you choose; RingCast does not receive a copy. Content is only sent elsewhere when you publish it to Cloudflare (section 6).

Purchases and payments are processed by Etsy through the Digitaloja shop under Etsy's own terms and privacy policy. RingCast never receives your payment details.

To activate, you enter your Etsy order number. RingCast checks it with Etsy, through the seller's connected shop, to confirm the order was paid, not cancelled, and which design it includes. RingCast stores on its servers only:

• the order number, which designs it unlocked and when it was activated, so an order cannot be reused;
• short-lived technical records of verification attempts, keyed to a scrambled form of your connection address, to prevent abuse.

RingCast does not store your name, email, postal address or other buyer details from the Etsy order.

If Etsy verification is unavailable, support may issue a one-time activation code. RingCast stores only a scrambled (hashed) form of the code, its first characters, the related Etsy order number where given, the designs it unlocks, usage counts, expiry and an internal note, plus an audit trail of when it was created, revoked or used. Failed attempts are recorded in scrambled form to block guessing.

If you choose to publish online, you connect your own Cloudflare account through Cloudflare's sign-in. RingCast requests permission only to read and create Cloudflare Pages projects, read your account memberships (to find your account) and stay connected.

• Cloudflare access and refresh tokens, and your Cloudflare account identifier and name, are stored encrypted on RingCast servers and never sent to your browser.
• Your browser keeps one secure cookie (ringcast_cf) holding a random reference to that connection.
• When you publish, your website files (including the texts and photos you chose) are sent to your Cloudflare account. Your website is hosted by Cloudflare in your account, under Cloudflare's terms and privacy policy.

Disconnecting removes the stored connection and asks Cloudflare to revoke the tokens. It does not delete your published website — you control it in your Cloudflare account.

The RSVP form can send guest replies to a Google Sheet you set up with a Google Apps Script address. Replies go from your guests' browsers directly to your Google account. RingCast is not intended to store guest RSVP responses; you are responsible for those guest data, and Google processes them under its own terms. The editor preview never sends real replies.

You decide what appears on your website and who can see it. If you include other people's personal details or photos, you are responsible for having the right to do so.

If you write to support@ringcast.wedding, we use your message and email address to answer you. Sign-in accounts exist only for RingCast's own administrators; customers do not create accounts.

• ringcast_cf — strictly necessary, set only when you connect Cloudflare; secure, not readable by scripts, expires after 30 days or on disconnect.
• Browser local storage and IndexedDB for your project, photos and activation (section 3).
• Short-lived sign-in storage for RingCast administrators only.

RingCast uses no analytics, advertising or tracking cookies. Fonts are served by RingCast itself and included in your exported and published website, so no font service is contacted.

• Verifying purchases, activation, publishing and support: performance of a contract with you.
• Preventing reuse of orders and abuse, and keeping security logs: legitimate interests.
• Keeping records where the law requires it: legal obligation.

• Etsy — marketplace, checkout and payment; order verification.
• Cloudflare — hosting of RingCast and of the websites you publish.
• RingCast's cloud hosting and database provider — stores the server-side records above and technical logs.
• Google — Google Sheets / Apps Script, only if you choose to use them for RSVPs.

Some of these providers may process data outside the European Economic Area, for example in the United States. Where that happens, transfers rely on the safeguards those providers offer, such as the EU-US Data Privacy Framework or standard contractual clauses.

• Browser data: until you delete it or clear your browser.
• Cloudflare connection: until you disconnect; the browser cookie lasts up to 30 days.
• Etsy activation records (order number, unlocked designs, activation date): kept while needed to support the purchased designs and legitimate support and licensing needs.
• Anti-abuse records of activation and support-code attempts: deleted automatically after 90 days.
• Support codes and their history: deleted automatically 12 months after the code was used, revoked or expired, unless longer retention is needed for security or legal claims.
• Support emails: kept for up to 12 months after the support matter is closed, unless longer retention is necessary for legal or security reasons.
• Technical server logs: kept for a limited period by our hosting provider.

You can ask us at any time to delete data we no longer need.

Tokens are encrypted, codes are stored only in hashed form, server-side records are not accessible from the browser, and administrator access is restricted. No method is perfectly secure, but we take reasonable measures to protect your data.

Under the GDPR you may request access to, correction or deletion of your data, restrict or object to processing, and request data portability. Email support@ringcast.wedding, including your Etsy order number so we can find the records. Most of your data lives in your own browser, where you can view, export (backup) or delete it yourself.

You may complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt), or the authority in your own EU country.

RingCast is intended for adults and is not directed at children.

We may update this policy when RingCast changes. The date at the top shows the latest version.

Vasques Marques, 2870-475 Montijo, Portugal — support@ringcast.wedding