Privacy

The short version

A Lounge collects the minimum a private, temporary event needs: a first name, an age, a line about yourself, one way to be reached, and a short Live portrait. It keeps them only while the Lounge lives, and deletes them shortly after it ends. No accounts, no ads, no selling of data, and no profiles that outlive the event.

What you share when you join

Joining a Lounge asks for: your first name; your age (the Lounge is for adults: you confirm you're 18 or over when you join); a short line about yourself, up to 120 characters, in your own words; which side of the wedding you're on, when the couple has set that up; who you are and who you're hoping to meet, which shape who appears in your room and whose room you appear in; and one way to be reached - an Instagram handle, a WhatsApp number, or a phone number for texts.

And your Live portrait: a short, natural moment built from twelve still frames captured by your camera right after you tap. Table9 does not record or store audio or video - only those still frames, which briefly come alive and settle back into your portrait. We don't use face recognition or measure your face: your portrait is only ever shown to people.

Nobody is obliged to give these details - joining is your choice - but without them you can't join a Lounge. If we learn that someone under 18 has joined, we remove them and delete their data.

Later, after you've sent a wave, you may be offered one optional extra: a phone number for a single notification text (see below). It is never asked for when you join, and saying no changes nothing about your night.

Who sees what

Guests in the Lounge see your first name, your age, your side, the line you wrote about yourself, and your Live portrait. Nothing else - so keep contact details out of that line. Who you are and who you're hoping to meet aren't shown to anyone. But because the room only shows guests whose choices match each other, someone who sees you in their Lounge can infer that you're open to meeting them.

Your contact detail stays sealed until a wave is mutual. Then it is revealed only to your match, and only until the Lounge expires. A wave that isn't returned is never revealed to anyone - not even to the person you waved at.

A notification number, if you opt into the match text, is never shown to anyone - not to other guests, and not to your match. It is separate from your contact detail and is used for exactly one thing: that single text.

The couple and their planner see three totals: how many guests joined, how many waves were sent, and how many connections sparked. Never names, never faces, never who.

Hide, report, and leave

You can hide any guest from the small ⋯ under their portrait, or with "Hide or report" on their ticket. You disappear from their Lounge and they from yours, no waves can pass either way, and they're never told. Reporting someone does the same and flags them; if enough different guests report the same person, they're removed from the Lounge for everyone. Reports are anonymous, are never shown to the couple or to the person reported, and are deleted with everything else.

Before and during the night, "Your ticket" shows you exactly what other guests see of you. You can change the line about you or retake your Live portrait there; the old portrait is deleted as soon as the new one is in.

You can leave at any time with "Leave the Lounge" at the foot of the room. Your Live portrait, name, the line about you, contact and waves are deleted on the spot - you don't have to wait for the Lounge to expire.

One thing is kept until the Lounge expires: any hides or reports involving you, attached to a one-way scrambled code made from your contact detail - never the detail itself. If you rejoin the same Lounge with the same number or handle, those hides and reports apply again, so leaving can't be used to get around them. The code only works inside that one Lounge and is deleted with everything else.

One text, only if it's mutual

After your first wave, Table9 may offer - once - to text you if that wave (or a later one) becomes mutual, so you don't miss it after leaving the party. It is entirely optional and asks for your explicit consent on the spot.

If you opt in, you'll receive at most one SMS, ever, and only when a wave becomes mutual: a short note with a private link back to your Lounge. It never names your match, never includes contact details, and is never used for reminders, marketing, or anything else. Reply STOP at any time to opt out with your carrier; message and data rates may apply.

The text is delivered via Twilio, our SMS provider. If you say "Not now", we record only that choice and never ask again.

Where it lives while the Lounge is open

Lounge details live in our database at Neon. Live-portrait images are stored with Vercel Blob at long, unguessable web addresses. Those addresses aren't listed, browsable, or searchable - but they aren't behind a password either: anyone holding the exact link could open the image while it exists. Treat your Live portrait like a photo you'd happily show at the wedding.

When it disappears

Everything guest-related expires 24 hours after the Lounge closes (if a Lounge is ended early, that is still 24 hours after its originally scheduled close): guest profiles, contact details, any notification number and its return link, uploaded media, waves, matches, and guest sessions. Deletion is automatic: it runs the first time anyone opens the Lounge after it expires, and otherwise in a daily sweep - so it completes within a day of expiry at the latest. After deletion, copies of images cached by our provider's network may persist for some time before they clear.

One honest caveat about the match text: if one was sent to you, Twilio keeps its own delivery records (including the destination number) on its own systems, under its own retention policy, which Table9 does not control. We delete our copy of your number with everything else.

What remains is the event's own record: the wedding name, the couple's names, the date, the Lounge's configuration, three anonymous totals - joined, waves, connections - and the anonymous usage counts described under "Cookies, analytics and logs". Nothing that remains identifies any guest.

Cookies, analytics and logs

Each Lounge sets one cookie whose only job is remembering your seat. It's signed, readable only by our server, and expires when the event's data does. There are no advertising or cross-site tracking cookies. Because we don't track you across sites, a browser's Do Not Track signal changes nothing here.

We use Vercel Web Analytics, which doesn't use cookies or follow you across the web. Vercel, our hosting provider, also keeps standard, short-lived technical logs (including IP addresses) to operate and protect the service, as web infrastructure does.

When something breaks, your browser or our server sends an error report to Sentry, our error-monitoring provider, which stores it in the EU for up to 30 days: what went wrong, on which page and in what kind of browser. We strip names, photos, contact details, IP addresses and the private parts of links before a report leaves, and we never record your screen.

To stop abuse, Table9 counts how often each connection or guest session uses a few actions (joining, waving, hiding, changing your ticket, the anonymous counts below, creating a Lounge, looking up a Lounge by its code). Those counters store only a one-way scrambled key, never your IP address itself, and are deleted within about a day.

To learn how Lounges work in practice, we keep anonymous counts per Lounge. Your browser reports, once each: that it opened the link, started joining, got the camera working (or had it blocked or refused) and took a portrait. Our server counts joins, first waves, waves, matches, hides, reports, leaves, opt-ins to the match text, organisers who asked for their links by email, and guests we removed. Some counts are also split by the kind of browser (for example "WhatsApp's built-in browser") or by 15-minute step of the night. They are just numbers, never linked to a name, photo, contact, device or IP address, so they are kept after the Lounge's guest data is deleted. To report each step only once, your browser keeps a small note on your device that it already did; it holds only an expiry time and is cleared after 3 days.

If you request a Lounge

The request form - your name, email, wedding date, city, role, and an optional note - is never written to our database. It reaches us as a single email so we can reply, and then lives in our inbox like any correspondence, on its own clock. Write to us any time and we'll delete it.

If you create a Lounge

Creating a Lounge asks for the wedding's name, the couple's names, the date and the Lounge's hours. Guests see them, and they stay with the Lounge's three totals after it ends, so your manage page keeps working. If you ask us to email you your links, we use your address for that one email and don't store it anywhere.

Service providers

Table9 runs on a few service providers, each using data only to do its one job: Vercel hosts the site, stores Live portraits (Vercel Blob) and counts page views; Neon holds the database; Resend sends our emails (Lounge requests, organisers' links, and alerts to us when reports remove a guest); Twilio sends the optional match text, when that feature is switched on; Sentry receives the scrubbed error reports; and Google Workspace holds our inbox, where your emails and Lounge requests arrive.

GitHub runs the tool we use to look after a live Lounge. Its log shows the wedding's name and Lounge code and, for each guest, an ID, first initial, age, the time they joined, their status (for example matched, or removed by us) and how many reports they've had - never a contact or a portrait. GitHub keeps these logs for 1 day.

These providers may process data in the European Union, the United States and other countries where they run their services; Sentry keeps error reports in the EU. We don't sell data or share it with anyone else.

About the demo Lounge

Demo profiles are fictional and use licensed stock media. Step inside and you're invisible to other visitors; your demo seat is swept away within about an hour.

Your rights

You can ask to see the data we hold about you, or ask us to correct or delete it. There are no accounts, so write to hello@table9.app with the wedding, your first name and roughly when you joined. We'll find your entry, tell you what we hold about you (this page lists every kind of data), and delete it if you ask - or tell you it's already gone, since everything is deleted about a day after the Lounge closes. To fix a detail, change your line or retake your portrait under "Your ticket", or leave and join again. We answer within 30 days.

If you're unhappy with how we've handled your data, you can complain to Israel's Privacy Protection Authority.

Your choices

A Lounge only ever contains people who chose to join it. If you want out before the event ends, tap "Leave the Lounge" and you're gone instantly. When this page changes, the "Last updated" date at the bottom changes with it. For anything else about this page, write to us: hello@table9.app.