Privacy

Effective July 22, 2026

DayFlow is made by Wedding Feels Co. ("we," "us"). This policy covers the DayFlow marketing site, the timeline builder, share links, the "Ask the planner" feature, and checkout. We wrote it to be specific rather than reassuring. Here is exactly what leaves your device, where it goes, and what we do and don't hand to anyone else. Questions: [email protected].

The short version

• Your timeline starts in your browser. It only reaches our servers if you create a live share link.
• We use an advertising pixel (Meta) on our marketing pages only (never in the builder or on share links), and it turns itself off if your browser sends a Do Not Track or Global Privacy Control signal.
• We never sell your personal information.

Your timeline: three states

1. On your device (the default). As you build, your timeline (names, wedding date, venue, events, notes) is saved in your browser's local storage. It stays on that device and is not sent to us.

2. A live share link. When you choose to create a live link, the current timeline is uploaded to our storage (Cloudflare) under an unguessable link so vendors' links stay current as you edit. Anyone who has that link can view it. See below.

3. A snapshot link. If live sharing isn't available, DayFlow falls back to a snapshot link that packs the selected timeline into the link itself. That data rides in the part of the URL after the #, which browsers never send to our servers, so we don't receive or store it. But anyone with the link can read it, and later edits won't update it.

Live links: viewing and deletion

A live link hosts your timeline on our infrastructure. Two honest things to know:

• Anyone with the link can view it. There's no password on the viewer, so treat the link like the document it is and share only the sections a vendor needs.
• You control the hosted copy. In the share dialog, Stop sharing & delete removes the hosted copy so the link you sent stops working, and New link retires the old link and issues a fresh one. "Start fresh" deletes it too. And even if you do nothing, a hosted timeline deletes itself automatically about 90 days after your wedding date (or, if the timeline has no date, after roughly a year without edits). You can also email [email protected] and we'll remove it.

Payments and access codes

Checkout is handled by Lemon Squeezy, our merchant of record. They process your card, receipt, and tax, and we never see your card number. They pass us the order details needed to deliver and support your purchase, such as your name, email, and license. Your access code is checked against Lemon Squeezy's license service when you unlock the builder and re-checked about every 30 days; once activated, the builder keeps working even if you're briefly offline.

Ask the planner (AI)

When you ask the planner a question, only the text of your question is sent to our AI provider, Anthropic, to generate the answer. We do not send your timeline, names, wedding date, venue, or your access code to the AI provider. Your code is used only on our side to confirm your purchase. Don't type sensitive personal information into the planner, and confirm anything important with your own venue and vendors; AI answers can be incomplete or wrong.

Venue sunset lookup

When you use the sunset finder, the town or venue name you type is sent to Open-Meteo to look up its coordinates. Your wedding date stays on your device, and the sunset time is computed in your browser.

Email (the timing cheat sheet)

If you ask for the free timing cheat sheet, your email address is stored with Flodesk, our email provider, so we can send it and the occasional related note. Every email has an unsubscribe link.

Analytics

Every page uses Cloudflare Web Analytics: cookie-free, aggregate counts of visits and pages. It doesn't use cookies, doesn't identify you, and doesn't follow you across the web.

Advertising and the Meta pixel

On our marketing pages only (our homepage and landing pages, not the builder and not share links), we use the Meta (Facebook) pixel to measure our ads and show them to people who've visited us. Like any Meta pixel, it lets Meta receive standard information about the visit: your IP address, browser and device, the page you're on, and Meta click identifiers stored in cookies (_fbp/_fbc), used for measurement, attribution, and retargeting.

When you purchase, our server sends Meta a Purchase event through Meta's Conversions API, so reporting is accurate even though checkout happens on Lemon Squeezy's domain. That event contains a one-way hashed (SHA-256) version of your email, the Meta click identifiers, and the order value and currency. We never send your plain email, your timeline, names, wedding date, venue, notes, AI questions, share links, or your license key to Meta or any ad platform.

Your opt-out is automatic. If your browser sends a Global Privacy Control (GPC) or Do Not Track signal, DayFlow does not load the advertising pixel or forward any click identifiers for that visit. You get the cookie-free analytics only. You can also opt out of Meta's use of your data in your Facebook and Instagram ad settings, and at the Digital Advertising Alliance's optout.aboutads.info.

California: Do Not Track disclosure

Under California law (Bus. & Prof. Code §22575), we tell you how we respond to "Do Not Track": as described above, a Do Not Track or Global Privacy Control signal turns our advertising pixel off for that visit, and the pixel never runs in the builder or on share links. We do not sell your personal information for money. Sharing online identifiers with Meta for retargeting can be considered "sharing" under some privacy laws; the opt-out above stops it, and you can withdraw at any time.

Service providers

We share only what each service needs to do its job:

• Cloudflare: hosting, security, cookie-free analytics, and storage for live share links.
• Lemon Squeezy: checkout, merchant-of-record payments, receipts, tax, and license validation.
• Anthropic: processes the planner question you type, to generate an answer.
• Open-Meteo: turns a venue town into coordinates for the sunset lookup.
• Meta Platforms: advertising measurement and retargeting on our marketing pages.
• Flodesk: sends the cheat sheet and related emails if you sign up.
• Google Fonts: serves the typefaces; Google receives your IP address to deliver the fonts.

Keeping and deleting your data

• Local timeline, license, and reminders: on your device until you clear them; clearing your browser removes them.
• Hosted live timelines: deleted when you revoke the link, and otherwise automatically about 90 days after your wedding date (or after roughly a year without edits if there's no date). See "Live links."
• Snapshot links: we don't hold them. The data lives in the link, so you control it by controlling who has the link.
• Order and license records: kept as long as needed for the purchase, refunds, tax, and our records, via Lemon Squeezy.
• Email address: kept until you unsubscribe or ask us to remove it.

To access or delete data we hold, email [email protected].

Children

DayFlow is for adults planning a wedding, intended for people 18 and older and not directed to children under 13.

Changes

If we change how we handle your data, we'll update this page and its effective date. Material changes will be reflected here before they take effect.

Contact

Wedding Feels Co., [email protected]. A human reads it.