Privacy Policy

We (the operator listed on this page) are the controller of account, billing-status and usage data. For guest data that a host collects through an event, such as names, messages or registration answers, the host is the controller and we process it on the host's behalf. Guests should contact the host about that data, and can also contact us.

Account data: name, email address and profile picture from your Google account.

Event and guest data: event details, invitation content, guest names, chosen characters, messages, and any registration answers a host asks for.

Purchase data: which plan was bought for which event, and order status. Payment card details are handled by Polar, not by us.

Usage and device data: pages viewed, clicks, approximate location derived from IP address, browser and device type, and error logs.

To provide and secure the service, show the space, send transactional emails, process purchases and refunds, prevent abuse, understand how the product is used and improve it, and comply with law. We do not sell personal data and we do not use guest messages for advertising.

Where GDPR applies we rely on: performance of a contract (providing the service), legitimate interests (security and abuse prevention), legal obligations (tax and accounting), and consent for product analytics. In the EEA, the UK and Switzerland, product analytics only runs after you accept it, and you can withdraw consent at any time through "Cookie settings".

We use these processors: Cloudflare (hosting, database, storage and email delivery); Polar (payments and merchant of record, including tax handling); PostHog (product analytics); and Google (Google OAuth sign-in and Google Analytics 4, managed through Google Tag Manager). They may only process data for the purposes we specify. We may also disclose data if required by law or to protect rights and safety.

Our providers operate globally, so your data may be processed outside your country, including in the United States and other countries that may not have the same data protection laws. Where required we rely on safeguards such as Standard Contractual Clauses.

We keep account data while your account is active. Event pages, guest entries and messages are kept until the host deletes them or for 12 months after the event date, after which we delete or anonymize them. When a host deletes an event, it is removed from view immediately and permanently deleted after 30 days. Purchase records are kept as long as tax and accounting law requires. Backups and logs expire on a rolling basis.

Depending on where you live (for example under GDPR or the California CCPA/CPRA) you may have the right to access, correct, delete, export or restrict use of your personal data, to object to processing, to withdraw consent, and to complain to your data protection authority. California residents: we do not sell or share personal information for cross-context behavioral advertising. To exercise a right, email us; we will respond within the time required by law and will not discriminate against you for doing so.

We use essential cookies for sign-in and language preference, and a cookie that remembers your analytics choice. These are always on because the service needs them.

We use PostHog for product analytics to see which pages and features are used. When analytics is on, your browser keeps a random anonymous ID in local storage and sends page views and feature events to PostHog. We do not use advertising cookies.

If you are in the EEA, the UK or Switzerland, we ask for your consent first, and analytics stays off unless you accept. Elsewhere analytics is on by default and you can turn it off at any time. Wherever you are, you can change your choice with the "Cookie settings" link in the footer; turning analytics off stops collection and deletes the anonymous ID from your browser. We also honor the Global Privacy Control (GPC) signal: if your browser sends it, we do not run analytics.

Google Analytics 4, managed through Google Tag Manager, measures marketing and blog page views and start, demo and pricing link clicks. Google receives sanitized page paths, allowlisted campaign parameters, referral domains, language, browser/device information and analytics identifiers. Invitation and participant pages, authentication, private app and administration pages, form values and member identifiers are excluded from Google measurement. Google analytics cookies may be used when analytics is allowed. Advertising personalization is disabled. Turning analytics off prevents the Google container from loading; any already stored Google analytics cookies can also be removed in your browser settings.

modagi is not directed at children under 16 and we do not knowingly collect their data for our own purposes. Hosts are responsible for ensuring that any child guests join with the consent of a parent or guardian where the law requires. If you believe a child's data was submitted without consent, contact us and we will delete it.

We use encryption in transit, access controls and least-privilege access to protect data. No system is perfectly secure, so please use a strong Google account password and second factor.

We will update this policy when our practices change and show the date at the top. For privacy questions or requests, contact the email shown on this page.