Cookie Policy

Last updated 3 September 2026

Cookies are small files a site stores in your browser. Wedding Card Maker uses a short list of them, and every one is there to make the service work — signing you in, remembering your language, or letting you back into an invitation you already unlocked. We set no advertising cookies and use no third-party analytics.

1.The cookies we set

Cookie	What it does	Type	Lasts
authjs.session-token (or __Secure-authjs.session-token over HTTPS)	Keeps you signed in. HTTP-only, so scripts cannot read it.	Essential	30 days, or until you sign out
authjs.csrf-token	Protects the sign-in form against cross-site request forgery.	Essential	Session
authjs.callback-url	Remembers where to send you after signing in.	Essential	Session
NEXT_LOCALE	Remembers whether you chose English or Hindi.	Essential	1 year
wcm_country	Remembers which market's prices and currency to show you.	Functional	1 year
wcm_tz_country	Remembers the country your browser's time zone suggests, so prices can be shown in your local currency before you pick a country yourself. Set by your browser, never from your IP address.	Functional	1 year
invite_access_<invitation id>	Proves you entered the correct password for a protected invitation, so you are not asked again on every page. HTTP-only, and holds a signed value rather than the password.	Essential	7 days
invite_viewed_<invitation id>	Stops one visit being counted several times when a page is reloaded. Counts views in aggregate only — it does not identify you.	Functional	6 hours

2.What we do not use

No advertising or retargeting cookies.
No third-party analytics — we run none on this site.
No social-media tracking pixels.
No cross-site profiling, and no sale or sharing of any of this for advertising.

That is also why you are not seeing a cookie banner: everything above is either strictly necessary for the service or a functional preference you asked for, and neither needs consent. If we ever add analytics, we will ask first.

3.Third parties

A few providers we rely on may set their own cookies when you interact with them directly:

Google — if you choose Sign in with Google, on Google's own sign-in page.
Stripe and Razorpay — during checkout, for fraud prevention and to complete the payment.
Cloudinary — serves the images on an invitation; it does not set tracking cookies for us.

Those cookies are governed by each provider's own policy, not this one.

4.Managing cookies

You can delete or block cookies in your browser's settings — Chrome, Safari, Firefox and Edge all offer per-site controls. Be aware that blocking the essential ones will stop you signing in, and will lock you out of password-protected invitations.

For the wider picture of what we collect and why, see our Privacy Policy. Questions go to support@example.com.