Cookie Policy

Last updated: September 25, 2026 · Previous versions

This is a translation of the original Spanish text. If the two versions ever differ, the Spanish version prevails, unless the law requires the interpretation most favourable to you. Read the Spanish version

1. Why we do not ask for your permission

Envite does not use analytics, advertising, social media or cross-site tracking cookies. There is no Google Analytics, no pixels and no third-party tools watching what you do. The only cookies we place in your browser are those strictly necessary for the service to work: keeping you signed in, remembering what you have put in the basket and remembering the language you chose. The law exempts these categories from consent, which is why you will not see a banner asking you to accept anything. If we ever add a measurement tool, this document will change and the corresponding notice will appear before it is installed.

2. Cookies we use

SESSION (names starting with “sb-”) Created by Supabase, our authentication provider, when you sign in. They store the token that proves it is you. Without them you would have to identify yourself again on every page. They are deleted when you sign out. BASKET (“envite_cart”) Remembers which plans and templates you have added to the basket. It contains no prices — those are always calculated on the server — and no personal data: only product identifiers. It expires after seven days or when you empty the basket. LANGUAGE (“envite-locale”) Remembers the language you chose, so that every page is shown in it. It contains only the language code (“es” or “en”) and lasts one year. All of them are first-party (set by our domain, not by a third party) and travel only over HTTPS in production. The session and basket cookies are marked so that the page's JavaScript cannot read them; the language cookie can be read, so that the page shown without a connection knows which language to use.

3. Maps and videos in invitations

A host can add a Google map or a YouTube or Vimeo video to their invitation. Those elements are served by those companies and, when they load, receive your IP address and may set their own cookies. That is why they do not load on their own: you will see a box telling you who serves the content and a button to load it. If you do not click it, nothing connects to them. If you do, their policies apply: policies.google.com/privacy for Google and YouTube, and vimeo.com/privacy for Vimeo. The “Get directions” button in invitations is an ordinary link: it only opens Google Maps if you click it.

4. Storage in the browser

If you upload photos to an album, the browser remembers the name you typed so that it does not ask you for it with every photo. It is kept in session storage, which the browser itself clears when you close the tab, and it never travels to any server.

5. Third-party cookies during payment

Payment is processed on Stripe's site, not ours. When you click “pay” you leave Envite, and Stripe may set its own cookies — mainly to prevent fraud — subject to its policy, which you can read at stripe.com/privacy. We do not receive those cookies or have access to them, just as we never receive your full card details.

6. How to delete them

You can delete cookies from your browser settings at any time. Bear in mind that doing so will sign you out and empty your basket, because that is exactly where that information lives. You can also set your browser to block them. In that case you will not be able to sign in or complete a purchase: there is no other way to remember who you are from one page to the next.

7. Changes

If this policy changes, we will update the date at the top. If the change involved adding cookies that do require consent, they would not be set until you gave it.