What we hold, and what never leaves your device.

Last updated 2026. Wildlights is in beta; if this changes materially, the change will be described here rather than quietly applied.

If you are a guest at an event

You scanned a code and your phone became a light. Here is everything that involves:

• No account, no name, no email address. Nothing identifies you.
• Your answer to the host's one question, if they asked one — "bride" or "groom", a section number. It is stored against a random identifier so your phone can rejoin the same group, and it tells the host how many people chose each answer, never who.
• A random identifier for your phone, kept in your own browser so that reloading the page does not lose your place.
• Technical necessities to keep you in time: connection timing, and the ordinary server logs any website keeps.

No location, no contacts, no camera, no photographs, no microphone. Closing the page ends all of it.

If you are hosting an event

Your music

Songs you choose are decoded and analysed in your own browser. The audio is never uploaded. What reaches the server is the resulting light show — colours and timings — plus enough about the track to recognise the same file again and draw its beat grid: its title, length, tempo and a short fingerprint.

The microphone, if you use it

Listening to an external source runs on your device. Audio from the microphone is turned into a timing match locally and is not recorded, stored or transmitted. It runs only while you switch it on.

Your account

An account holds your email address, an optional name, your saved colour sets, and the events you own. Passwords are stored only as a salted hash — never in a form anyone can read, including us. Sign-in links and reset links are stored only as a hash, expire within fifteen minutes and work once.

Your events

An event holds what you put in it: its name, your questions and their answers, your saved shows, and the counts of who answered what.

What we do not do

• No advertising, and no selling or renting of anything to anybody.
• No third-party trackers or advertising pixels on the app itself.
• No profile of you built across events.

Cookies

If you sign in, two cookies are set: one that holds your session and cannot be read by page scripts, and one that exists so the page can prove a request came from it rather than from another site. Both are removed when you sign out. Guests joining an event are not given any cookies for tracking; their phone keeps a local identifier in its own storage.

Analytics

These marketing pages may use a privacy-respecting measurement tool to count visits. The app itself — creating events, running shows, joining as a guest — carries no analytics at all.

How long things are kept

Events and shows are kept until you delete them or ask us to. Sign-in sessions expire within thirty days, sooner if unused. Sign-in and reset links expire in fifteen minutes. Guest answers live with the event they belong to.

Your choices

You can sign out of every device by setting a new password. You can ask for your account and its events to be deleted, and they will be. As a guest, closing the page is the whole of it — nothing of yours persists beyond that event's own records of how many people answered what.

Asking us

Questions about any of this, or a request to delete something, go to the contact page.