Is an online invitation safe? Short answer: yes, if the platform does its part and you use the privacy options it gives you. A wedding card carries the couple's names, the date, the venue and sometimes a bank QR code for gifts. Here is who can really see that information, where guest data lives, which risks are real, and what to check before sending.

Three kinds of information on a card

  • What you put on the card (names, photos, date, venue, map, gift QR): visible to anyone who has the link, just like a paper card in their hand.
  • What guests send back (RSVPs, party sizes, wishes, signatures, gift confirmations): collected in your dashboard. Wishes appear in a live feed on the card if you allow them.
  • Account data (your sign-in email and password): held by the platform under its privacy policy, which you can read at /privacy-policy.

The simplest rule: anything you would not print on a paper invitation does not belong on the online one either.

Who can actually see your card

People who have the link

A card works like a small private web page. Whoever you send the link to can open it, and anyone they forward it to can open it too. Treat the link as shared selectively, not as a secret.

The public gallery

VowForever has a gallery of cards made by customers. A card appears there only if you switch on its gallery option in My Invitations, and it is off by default. Leave it off for any card that shows a home address or a bank QR code.

Your own social media posts

This is the most common way details leak. A link posted publicly can be opened by anyone scrolling past. To invite widely but privately, post to Friends only, or send the link in private chats.

The real risks

Links forwarded further than you meant

A paper card handed over in person rarely travels far; a link is one forward away. Do not put details on the card that only a few relatives should know, such as your parents' personal phone numbers or the exact address of a private home.

Advertising when the house is empty

A card says exactly when the whole family will be out. For a restaurant reception, list the restaurant only, not your home. For a home wedding, send the link to people you know instead of posting it publicly.

Bank details

Someone who knows your account number can only send money in, not take it out. The real risk is a fake card with someone else's account. Put your QR codes in the gift box widget, which guests open on purpose, and scan each code with another phone before sending. VowForever never handles the money; transfers go directly between banks.

Fake invitations and suspicious links

Scammers disguise links as invitations or voting requests to trick people into entering passwords or installing apps, then take over their WhatsApp or Facebook accounts to scam relatives. A genuine card never needs any of that.

Eight things to do before you send

  1. Keep the card as a draft until it is ready. Drafts cannot be opened by guests.
  2. Leave the gallery option off unless you are happy for strangers to see the card.
  3. Include only what the party needs: names, time, venue and map. Leave out ID numbers, a home address you are not using, and phone numbers of people who have not agreed.
  4. Send personal links from /dashboard/guests, so each guest gets a link with their name and you can see who has viewed it.
  5. Put bank QR codes in the gift box and test-scan them, checking the account holder's name.
  6. If a helper manages guests, protect the share management link with a password, give it only to people you trust, and turn it off when you are done.
  7. Clean up wishes at /dashboard/messages by deleting anything inappropriate, or turn wishes off in the card's link settings.
  8. After the wedding, export your RSVPs and wishes, then hide the card or let it expire. Hiding keeps all your data in the dashboard.

Helping guests spot a fake card

Security is not only the couple's job. Share these signs with older relatives.

  • A real card opens straight in the browser or inside Messenger, with no download.
  • It comes from someone you know, for an occasion you already expected.
  • Be suspicious if it asks you to download a file, especially an .apk on Android.
  • Be suspicious if it asks you to log in to WhatsApp, Facebook or your bank, or to enter an OTP code to view it.
  • Be suspicious of misspelled or unfamiliar domains, or an urgent message from an account you have not heard from in years.

When in doubt, call the sender before tapping. A 30-second phone call is much cheaper than a stolen account.

Five questions to ask any invitation platform

  • Who runs it, and are contact details clear?
  • Is there a privacy policy explaining what is collected, why and who it is shared with?
  • Does the site use HTTPS, with a padlock in the address bar?
  • Can you hide a card, keep it out of public listings and delete data when needed?
  • Who can see guest replies? They should be visible only to you and anyone you explicitly share access with.

For quick sharing habits, see /blog/online-invitation-privacy-tips. To ask about deleting your account or data, email support@vowforever.love.