What JoinMe stores, and for how long.

When you RSVP to an invite, JoinMe stores the answers you type: your name, your response (yes, maybe, no, or waitlist), how many people you are bringing and their names if you add them. If you fill them in, it also stores your email address, your phone number, dietary notes, a message to the host, and your answers to the host’s own questions. If the host runs a date poll, potluck, song requests, or a photo album, whatever you submit there is stored with the event too. If the host checks you in on the day, the time is recorded.

An email address is used to send you a confirmation with a link to edit your own reply, reminders, and other messages about the event, including updates from the host. It is not sold.

Creating an invite needs a JoinMe account: a name, an email address, and a password. The password is never stored in readable form. Account email is used for verification, password resets, and notifications about your own events. A message each time someone RSVPs, for example. Everything you enter about an event (title, description, date, place, cover image, questions, agenda, links) is stored so the invite page can render it.

• The host of an event sees every reply to that event, including the optional email addresses and phone numbers guests leave.
• A host also keeps a contacts list of the names and email addresses of guests who RSVP’d to, or were invited to, their events. Only that host sees it, and they can use it to send you messages about future events.
• Guests see the public invite page. Which guest names are shown there is the host’s choice.
• A public event is listed in the JoinMe directory and in the sitemap. Unlisted and private events are not, and their pages ask search engines not to index them.
• Host manage links and guest edit links contain a secret token. They are served with noindex and no-referrer headers so the token is never leaked to another site or to a search index. But anyone holding the link can use it, so treat it as a password.
• Guest-uploaded photos stay pending and are visible only to the host until the host approves them.

JoinMe runs on Cloudflare. Pages are served from Cloudflare Workers, event and guest data is stored in Cloudflare D1, and uploaded cover images and guest photos are stored in Cloudflare R2 and served from this domain. Email is sent through Cloudflare Email Service from no-reply@joinme.rsvp. Cloudflare is the only third party involved in running the site.

There are no advertising trackers, no third-party analytics and no cross-site cookies. The app sets a session cookie once you sign in, and stores your light/dark theme preference in your own browser. Each invite page keeps a simple view counter. A number on the event, with nothing about who viewed it. Update emails from a host contain a small image that records when you open the message, so the host can see how many recipients opened it.

An event expires when it is over. Ninety days after that, a scheduled job permanently deletes the event and everything attached to it: RSVPs, plus-ones, date polls and votes, potluck sign-ups, song requests, invitations, and uploaded photos and cover images. A host can delete an event sooner from the manage page, which removes its guest data and stored images immediately. A guest can use the edit link in their confirmation email to change their reply while the event is active and RSVPs are open. After the host closes RSVPs or the RSVP deadline passes, guests can still withdraw while the event remains active. A host can remove a guest from the guest list.

A host’s contacts list is separate from any one event, so a contact is not deleted when an event is deleted or expires. It stays until the host removes it or deletes their account. You can stop invitations and updates from a host with the unsubscribe link in their emails.