toytoy.az
Sign up

Privacy policy

Last updated: 2026-10-19

toytoy.az is a wedding planning service. This page explains which personal data we collect, why, who can see it, and what rights you have over it.

What we collect

Your account: name, email, optionally a phone number, and a one-way hash of your password. We never store the password itself.

Wedding data: what you enter yourself — your guests' names, side (groom or bride), party size, table numbers, invitation replies, gift amounts, costs and photos you upload.

Inquiries: when you contact a vendor, your name, phone, wedding date, guest count and message.

Technical: a session cookie that keeps you signed in and a cookie for your language. No advertising cookies; Google Analytics cookies are set only if you accept them (below). Your cookie choice is kept in your browser's storage. Your IP address is held briefly in memory to stop repeated attempts and is not written to our database; it can stay in server and network logs for a short time.

Visit statistics, without cookies: we note which pages and listings are viewed, the site a visit came from, the type of device and the language. To count visitors, a one-way code is made from your IP address and browser with a random key that changes every day; the key is deleted at the end of that day, so the code cannot be turned back into an IP address and visits on different days cannot be linked. Individual records are kept for 90 days, after which only daily totals remain. Vendors can see totals for their own listing only, never who the visitors were.

Google Analytics, only if you accept it in the cookie banner: Google sets its own cookies (_ga) and receives the address of the public pages you open (pages in your account, invitations, password resets and invite links are not sent at all), the site you came from, your browser, device, an approximate location derived from your IP address, and which listings you view or contact. Google does not store the IP address itself. Advertising features and Google signals are off, and the data is kept for 14 months. You can withdraw consent at any time under “Cookie settings” at the bottom of every page; we then delete those cookies.

Why we use it

To run the service: guest list, seating, invitations, the gifts and costs report.

To pass your inquiry to the vendor you chose and to get back to you.

For essential account emails: confirming your email address, password reset, an invitation to a wedding. We send no marketing.

We do not sell your data or use it for advertising.

Legal basis

We process data on the basis of the consent you give at sign-up and to provide the service you use. You can withdraw consent at any time, and we will then delete your account and data. Google Analytics runs only on the consent you give in the cookie banner.

Your guests' data

You are the one entering other people's details into a guest list. Do it only to organise your wedding, and only what is needed: a name and a party size are usually enough.

If a guest asks to be removed, you can delete them from the list yourself, or they can write to us.

If you would rather share this with nobody, download the free Excel planner: it works entirely on your own device and we never see what you put in it.

Who can see it

A wedding's data is visible only to the members you invite, within their role. A member assigned to one side, for example, sees only that side's guests and gifts. If the couple chooses to keep the two sides separate, each partner and the helpers they invite see only their own side's guests, gifts and replies; the budget and the table plan stay shared. Showing the sides to each other needs both partners to agree.

A vendor you send an inquiry to receives your name, phone and the inquiry.

The companies the service runs on: servers at OVH in Europe, delivery through Cloudflare's network, backups in Cloudflare R2, and email through our hosting provider. They store and carry the data only on our behalf. Invitation links are shortened by tezqr.com, a service of the same group: it keeps each link and counts how often it is opened, with the country but not the page it was opened from. If you accept it, Google Analytics (Google Ireland Ltd.); Google may also process this data in the United States.

We may disclose data to competent authorities where the law requires it.

How long we keep it

Your account and weddings are kept until you delete them. You can delete a wedding, and your account, yourself (under Your account): weddings only you own are deleted with everything in them; in weddings shared with another owner, what you entered stays for them without your name, except in the gift records, which keep it so they still show who recorded what; enquiries you sent stay with the businesses that received them.

Deleted data leaves our backups within 30 days.

Inquiries are kept for as long as they are needed to put you in touch with the vendor; ask and we delete them sooner.

Your rights

You can ask what data we hold about you, have mistakes corrected, have your data deleted, and withdraw your consent.

Write to us from the email address you registered with. We reply within 30 days.

Children

The service is for people aged 18 and over.

Changes and contact

If the meaning of this document changes, we publish the new version here and tell account holders by email.

Questions and requests: [email protected]