Privacy Policy
Kith Post is a free, non-commercial, open-source digital-invitation service operated by Ilia Baranov as a personal project. It is self-hosted and designed to collect as little data as possible and to encrypt the personal data it does keep. This policy explains what we access, store, and do with your data — and how you can remove it.
Google user data we access
- Basic profile & email (
openid,email,profile) — your name, email address, and Google account ID, used solely to create and identify your account. - Send email on your behalf (
gmail.send) — used only to send the invitations, cards, and reminders you create, from your own Gmail account. We cannot read, search, modify, or delete anything in your mailbox; the send-only scope does not grant that access.
What we store, and how we protect it
- Your account name, email, and a Google OAuth refresh token (so the app can send on your behalf) — encrypted at rest.
- The cards/events you create, your recipient lists and their RSVPs, and your address-book contacts — recipient and contact names, email addresses are encrypted at rest.
- Card images you upload — the heavy full-resolution copy is automatically purged after the event's retention window.
Data is encrypted at rest (Fernet) and served over HTTPS in transit. The service runs on a single self-hosted server; there are no third-party analytics, ads, or trackers.
How we use it
To authenticate you, send the messages you compose — from your Gmail — show you honest delivery/RSVP status, and send the follow-up reminders you enable. We do not use your data for advertising or profiling.
Sharing
We do not sell or share your data. The only outbound flow is the message you choose to send, to the recipients you specify — by email through Google's Gmail API from your own account.
Limited Use
Kith Post's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Retention & deletion
- Your account page offers a one-click export and a permanent delete that removes your account and cascades to your events, recipients, and contacts.
- Full-resolution images are auto-purged after the retention window.
- You can revoke Kith Post's access at any time at myaccount.google.com/permissions.
Recipients of your invitations
Recipients get no account and no cookies, and there is no tracking pixel. "Opened" simply means a person visited the invitation page. We exclude anything that isn't a person reading: the automatic fetches chat apps and search engines make to build link previews, requests that identify themselves as nothing at all, and any visit arriving within seconds of the message being sent. It counts readers rather than robots. Their email and name are stored encrypted so the invitation can be delivered and RSVPs recorded.
Cookies
One signed session cookie keeps you logged in. No third-party or advertising cookies are used.
Children
Kith Post is not directed to children under 13 and we do not knowingly collect their data.
Changes
We may update this policy; material changes will be reflected by the "last updated" date above.
Contact
Questions about privacy or your data: [email protected].