Privacy Policy

Effective: 1 April 2026

Your privacy matters to us. This policy explains what data Oksyon ("we", "us", "our") collects, why we collect it, and how we handle it. We keep things simple and transparent.

1. What We Collect

Account Information

When you sign up via Google or Facebook, we receive your name, email address, and profile photo from the provider. We use this to create and identify your account.

Event Data

Information you enter when creating events — event names, dates, locations, descriptions, guest names, RSVP responses, menu items, registry items, and messages. This data is stored to provide the service.

Photos

Photos uploaded by event organisers or guests are stored securely and are only accessible to people with the event link.

Contact Messages

If you contact us through our contact form, we store your name, email (if provided), message, and your IP address (for rate limiting only).

Technical Data

Standard web server logs including IP addresses, browser type, and pages visited. This is used for security and to keep the service running smoothly.

2. How We Use Your Data

  • To provide and operate the Oksyon service
  • To send event-related information to guests (e.g., invitations)
  • To respond to your contact messages
  • To display advertisements that help keep the service running
  • To prevent abuse and maintain security

We do not sell your personal data to third parties. We do not send marketing emails.

3. Third-Party Services

We use a small number of trusted third-party services:

  • Cloudflare — hosting, content delivery, database, and file storage. Your data is processed on Cloudflare's infrastructure.
  • Google AdSense — we display advertisements provided by Google. Google may use cookies and web beacons to serve ads based on your prior visits to this and other websites. You can opt out of personalised advertising by visiting Google Ads Settings.
  • Google OAuth — authentication only. We receive your name, email, and profile photo when you sign in with Google.
  • Facebook OAuth — authentication only. We receive your name, email, and profile photo when you sign in with Facebook.
  • Google Fonts — web fonts loaded in your browser. Google may collect standard usage data.

4. Data Storage & Security

Your data is stored in Cloudflare's global network using their D1 database and R2 storage services. All connections to Oksyon are encrypted via HTTPS. We don't store passwords — authentication is handled entirely through Google and Facebook OAuth.

5. Data Retention

Your data is retained for as long as your account exists. If you delete your account, your personal data and events will be removed. Some data may be retained in backups for a limited period.

6. Your Rights

You can:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Export your event data

To exercise these rights, contact us.

7. Cookies

We use a session cookie to keep you logged in. Third-party advertising partners, including Google, may also use cookies to serve ads based on your browsing activity. These cookies help fund the free tier of Oksyon. You can manage cookie preferences in your browser settings or opt out of personalised ads at Google Ads Settings or aboutads.info.

8. Children's Privacy

Oksyon is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the service. The effective date at the top of this page will always reflect the latest version.

10. Contact

Questions about this policy? Get in touch.