Start free
Forever Stories

Privacy policy

How couples and their guests are looked after on Forever Stories.

Last updated 2 October 2026

Being reviewed. This wording is complete and is being checked before it becomes final. If anything here is unclear, ask us on the contact page.

  1. Who we are

    Forever Stories is run by Code 4 Mates Dev (Pvt) Ltd, a company incorporated in Sri Lanka (“we”, “us”). We are responsible for the information described here under the Personal Data Protection Act, No. 9 of 2022. You can reach us at [email protected] or on WhatsApp at +94 71 393 6662.

  2. The two kinds of people whose information we hold

    • Couples who create a wedding website with us.
    • Guests whom a couple adds to their guest list, who reply to an invitation, or who share photographs and videos from the wedding.

    For guest details, the couple decides who is invited and what is sent. We handle those details on the couple’s behalf and only to run their wedding website. Couples confirm that their guests are happy to be added.

  3. What we collect

    • Account: your mobile number and your email address, which we use to sign you in with a one-time code and to send you receipts and news of your replies, and the names you give us.
    • Wedding details: names, dates, venues, your story, photographs, and the choices you make in the editor.
    • Guest list: guest names, phone numbers, which events each guest is invited to, and the number of seats for each.
    • Replies: whether a guest is coming, how many people, and any note or dietary need they write. If a guest types an email address in their reply, we use it once, to confirm their reply arrived, and for nothing else.
    • Memories: photographs and videos that guests or your photographer share, if you choose the Memories add-on. A guest who shares from the printed QR code gives their full name and mobile number, so the couple knows who shared what. Shared photographs and videos are kept exactly as they were taken, including what the phone or camera stored in the file, which can include when and where it was taken. Only the couple and the person who shared it can open it.
    • Payments: the amount, date and result of a payment. Card details are entered on Dialog Genie’s secure page; we never see or store your card number. For a payment arranged with our team (for example a bank transfer), we keep the reference you give us, and it is shown on your receipt.
    • Messages to us: the name, email address, wedding date and message you write on our contact page.
    • Technical: basic records such as when an invitation link was opened, the kind of device, error reports, and the internet address a request came from, which we use for a short time to stop misuse.

  4. Cookies

    • A sign-in cookie keeps you signed in to your dashboard. It is removed when you sign out.
    • A guest who shares photographs from the printed QR code keeps a cookie with the name and mobile number they gave, for up to 180 days, so they are not asked again and can see and remove what they shared.
    • A cookie remembers the language you last read an invitation in, English, Sinhala or Tamil, for up to a year, so the next one opens in it. It holds nothing else.
    • We do not use advertising or tracking cookies.

  5. How we use it

    • To build and show your wedding website, and to prepare each guest’s personal invitation link.
    • To sign you in, by sending a one-time code to your mobile number or your email.
    • To email you what you need to know: your receipts and refunds, guests’ replies (as often as you choose in Your account, or not at all), and a notice if your email or mobile number is changed.
    • To show you replies, head counts and who has not opened their invitation.
    • To take payment and give you a receipt in your dashboard.
    • To answer your questions, prevent misuse, and meet our legal obligations.

    We do not sell personal information, we do not use guest details for our own marketing, and we do not show advertising on invitations.

  6. Who can see what

    • A guest with a personal link sees their own invitation and their own reply. With Memories, a guest sees the photographs they shared themselves and the photographer’s photographs the couple chooses to show.
    • Anyone with the wedding’s public address or printed QR code can see the invitation itself, as the couple published it, and the photographer’s photographs the couple chooses to show.
    • The couple sees their whole guest list, every reply, and every photograph and video shared with them.
    • A photographer the couple invites can share to that wedding only.
    • Our team looks at a wedding’s information only when needed to support you or keep the service safe. Changes our team makes to accounts, orders and packages are recorded.

  7. Services that help us run Forever Stories

    We use carefully chosen providers, and each receives only what it needs:

    • Supabase (database and sign-in), Netlify (website hosting) and DigitalOcean (photograph and video storage).
    • text.lk (sending sign-in codes by SMS) and Resend (sending our emails). Invitation messages are sent by the couple from their own WhatsApp; we prepare the message and link, and WhatsApp’s own terms apply to the sending.
    • Dialog Genie (card payments).

    Some of these providers keep information outside Sri Lanka, for example in India and the United States. Where they do, we rely on their contractual and security commitments to protect it to the standard the Personal Data Protection Act requires.

  8. How long we keep it

    • Your wedding website stays online for at least 12 months after the wedding date. Before we take it offline we will tell you, so you can keep what you want.
    • Memories photographs and videos are kept for at least 6 months after sharing closes, so you have time to download the album. We will tell you before they are deleted.
    • Payment records are kept for as long as tax law requires.
    • You can ask us to delete your wedding website, guest list and photographs earlier, at any time.

  9. Your choices and rights

    Under the Personal Data Protection Act you can ask to see the information we hold about you, have it corrected or deleted, or object to how it is used. Couples can remove guests and photographs from their dashboard and download their photographs and videos. Guests can ask the couple, or contact us directly, to remove their details. Write to [email protected] or message us on WhatsApp; we reply within 14 working days.

  10. Keeping it safe

    Information travels over encrypted connections, and access rules in the database keep each wedding’s information separate. Guests’ and the photographer’s photographs and videos can only be opened through private links that expire; the photographs a couple places on their own invitation are public, like the invitation itself. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

  11. Children

    Accounts are for adults aged 18 or over. Guests of any age may appear on a guest list a couple adds.

  12. Changes

    If we change this policy in a way that matters, we will update the date above and tell couples with an active wedding website.