Privacy & your data.

What you share, what stays private, and what to keep safe.

Your public signup page

A gathering’s name, date, time zone, table names, activities and available-place counts are public to anyone with its link. Use details you are comfortable sharing. Other participants’ names, registrations, organizer controls and uploaded photos are not included in that public view.

Your photographs

Photos are stored privately in Sanity Content Lake. When you ask INKSHIFT to read a photo, it sends the image to Qwen3-VL through Hugging Face Inference Providers. It may also send the previous photo and approved schedule to understand an edit. Participant names and organizer access codes are excluded from that request.

Upload event plans you have permission to use. Avoid private contact information or unrelated personal details on the sheet. Photos and previous plan revisions remain stored; there is no automatic deletion schedule or in-app deletion tool yet.

Names and registrations

Participants supply a name so the organizer can identify their booking. The organizer can see names and registrations. Each participant can see and cancel their own bookings from the browser they used to join. There is no email verification, and separate browsers can create separate registrations.

Browser access

INKSHIFT uses essential browser cookies for organizer and participant access. Those cookies last 30 days unless cleared sooner. A saved organizer access code lets you reopen a gathering on another device. Keep it private: it grants the same control as the original browser.

INKSHIFT does not add advertising trackers or analytics scripts. Its hosting and data providers may keep operational request logs.

Before you invite people

Check the date, time zone and plan, then share the participant link. Keep the organizer code separate. Read the organizer guide for setup and recovery.