1. Minimalist Storage Philosophy
When wedding guests open an invitation on their mobile devices, the last thing they should encounter is an intrusive, screen-blocking cookie consent banner loaded with dozens of advertising vendors.
We do not use marketing cookies, ad retargeting pixels (such as Meta Pixel or Google Ads) or session recording tools anywhere on Weds.to. Couple wedding websites and guest RSVP forms only use the storage listed below that they need to work.
3. Complete Storage Inventory
Below is an exhaustive, transparent inventory of all cookies and browser LocalStorage keys deployed by Weds.to:
| Identifier | Type | Purpose | Lifespan |
|---|---|---|---|
sb-*-auth-token | HTTP Cookie (Secure, SameSite) | Supabase authentication session token. Maintains secure login state for couples and admin dashboards. | Session / 30 days |
weds_seen_[slug] | LocalStorage | Tracks whether a visitor has viewed the splash screen / welcome animation on a specific couple's wedding website to avoid repetitive playback. | Persistent (browser local) |
weds_cart | LocalStorage | Stores temporary shopping cart selections (e.g. chosen template or gift add-on) prior to redirecting to checkout. | Cleared after order |
weds_active_workspace | LocalStorage | Remembers the currently active wedding ID when a couple or planner manages multiple wedding workspaces. | Persistent |
weds_analytics_consent | LocalStorage | Remembers whether you accepted or declined analytics, so we do not ask again. | Persistent |
weds_beta_tester, weds_beta_access | HTTP Cookie | Only for invited beta testers: remembers early access to new features. | Up to 30 days |
weds_guestbook_[design] | LocalStorage | Keeps a guest's guestbook draft on their own device while they write it. | Persistent (browser local) |
_ga, _ga_* | HTTP Cookie (Google Analytics) | Counts visits to our marketing pages. Set only on those pages, and only after consent in the EU, EEA, UK and Switzerland. | Up to 2 years |
theme_preview_mode | LocalStorage | Stores the builder viewport preview toggle (desktop view vs. mobile phone frame). | Persistent |
4. Sub-processor Storage Scope
Our infrastructure partners operate within strictly scoped parameters:
- Google Analytics: Sets the
_gacookies described above on our marketing pages only, after consent where required. See Google's privacy policy for how Google processes this data. - Supabase: Issues secure cryptographic authentication cookies to prevent unauthorized session hijacking and safeguard couple data.
- Lemon Squeezy: When navigating through the checkout sequence, Lemon Squeezy utilizes strictly necessary anti-fraud and payment processing tokens to ensure safe credit card processing compliant with PCI-DSS Level 1 standards.
5. Managing and Clearing Browser Storage
You maintain complete control over cookies and LocalStorage within your browser settings. You can review, delete, or block client storage at any time:
- Apple Safari: Navigate to Settings > Safari > Advanced > Website Data to view or remove cached entries.
- Google Chrome: Open Settings > Privacy and Security > Third-party cookies > See all site data and permissions.
- Mozilla Firefox: Go to Settings > Privacy & Security > Cookies and Site Data > Manage Data.
- Microsoft Edge: Open Settings > Cookies and site permissions > Manage and delete cookies and site data.
Note: Clearing essential authentication cookies will sign you out of your couple dashboard, requiring you to log in again on your next visit.
Questions regarding client storage?
Our technical compliance team is available to provide technical breakdowns or audit logs for security teams.