rsvp-to keeps cookies to a minimum. We use only essential cookies — the ones needed to sign hosts into their dashboard and keep the site secure. We do not use advertising cookies, and we do not track you across other websites.
The short version
Guests replying to an invitation need no account and are set no tracking cookies. Hosts signing in to a dashboard get a secure session cookie so they don't have to log in on every page. That's it.
| Cookie | Purpose | Lasts |
|---|---|---|
CF_Authorization | Signs a host in to their event dashboard (via Cloudflare Access). Essential — the admin area can't work without it. | Session / short-lived |
| Security tokens | Cloudflare sets essential cookies to protect the site from abuse and keep connections secure. | Session |
Guest-facing invitation and RSVP pages set no cookies of their own. If a guest opens their personal link, the token in the URL — not a cookie — is what identifies their invitation.
Because we only set essential cookies, there's nothing to opt out of for browsing or replying to an invitation. You can clear or block cookies in your browser settings at any time — though blocking the essential ones will stop the host dashboard from keeping you signed in.
How we handle the data behind these pages — and when events are suspended and deleted after the day — is covered in our Privacy & data policy. Questions? Reach us via the contact details on our home page.