Privacy policy
Updated October 7, 2026
This policy explains what data Ordofolio processes, why and for how long. We keep it as short and clear as we can.
In short
- Your program stays in your browser, on your own device. You don't need an account. If you do sign in, we keep only your email address.
- If you share a program, we encrypt it on your device first. Our server can't read names, texts or photos.
- We don't use tracking cookies.
- We don't sell data, and we don't use your program for anything else.
Who is responsible
Ordofolio is a product of Head Intelligence, based in the Netherlands and registered with the Dutch Chamber of Commerce (KVK) under number 42030553. Head Intelligence is responsible for processing your data. Questions? Email contact@ordofolio.com.
Your program stays on your device
Everything you enter in the builder, such as names, texts and photos, is saved by your browser on your own device. It doesn't go to our server. If you clear your browser data, your program is gone. So save a file now and then. You can also use that file to keep working on another device.
Sharing with end-to-end encryption
You can share your program with your officiant, who can review it, add comments and approve it. You can also share a digital program with guests. This is how it works:
- Your browser creates a random key.
- Your browser encrypts the program with that key.
- Only the encrypted version goes to our server.
- The key is in the link, after the hash sign (#). A browser never sends that part of a link to a server.
Anyone with the full link can read the program, so share the link only with people who may see it. Comments from the officiant are encrypted the same way.
If you sign in
Signing in is optional. If you sign in, we keep:
- your email address;
- if you sign in with Google: your Google account ID, so we can recognize you. We don't ask for your name or photo;
- when your account was created and when you last signed in.
We don't link your program to your account. It stays on your own device. You can delete your account yourself on the account page. We then erase this data right away.
What our server does see
To store and show a shared program, our server sees only:
- the number of the shared program (the code in the link, without the key);
- the size of the files;
- times, such as when a program was shared or changed;
- the kind of occasion, such as a wedding or a funeral;
- the status, such as waiting for review or approved.
Our hosting also processes technical data, such as your IP address, to deliver and secure the website.
What we process and why
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Encrypted shared program and the data above | Sharing, reviewing and approving the program | Performance of the agreement | Until the expiry date you choose when you share it |
| Email address and, if you use it, your Google account ID (when you sign in) | Letting you sign in | Performance of the agreement | Until you delete your account |
| Email address for notifications (if you want them) | Letting you know that someone commented on your program, or that a new version is ready to review. At most one email per hour, without names or texts from the program, and always with a link to unsubscribe | Consent | Until you unsubscribe, or otherwise until the shared program is deleted |
| Data in a report of illegal content | Handling the report | Legal obligation | As long as we need it to handle the report |
| Technical data, such as your IP address | Delivering and securing the website | Legitimate interest | Briefly, only for security and outages |
| Visitor statistics without cookies: which page, the kind of device, the country and the kind of website you came from, and in the builder which steps and which choices from our library | Seeing which pages help people and where the builder can be better | Legitimate interest | 6 months, then only as daily totals (25 months). They can't be traced back to you |
After the expiry date, we delete the shared program automatically. Your own copy on your device stays.
Cookies
We don't use tracking cookies, and we don't use analytics that can see the content of your program. On our information pages we count visits ourselves and with Vercel Web Analytics. Both work without cookies and without following you on other websites. We see totals, such as which pages are read most and which countries visitors come from. To count visitors per day, we turn your IP address and browser into a code that can no longer be traced back after one day. We don't keep your IP address.
In the builder we count only which step you open, which kind of program and which texts from our library you choose, and whether you make a PDF. We never send the content of your program, names, your own texts or photos. On the server we also count how often programs are shared, opened and approved and how often someone signs in, without recording which program or which person it is. We load no measuring code on your account page or in shared programs. If "Do Not Track" or "Global Privacy Control" is on in your browser, we don't count your visit or your use of the builder.
If you sign in, our website sets a cookie that says you are signed in. That cookie works only on our website and expires after 30 days or when you sign out. Your browser keeps your program in local storage. That isn't a cookie to track you: it's needed to save your work.
There are never ads in the builder or in shared programs. If we ever show ads on our information pages, we will ask for your consent first and update this policy.
Processors
We work with these companies. They process data only for us and only for this task:
- Vercel: hosting the website and the visitor statistics of our information pages.
- Neon: storing encrypted shared programs, the data our server sees and our visitor statistics, in a data center in Frankfurt, Germany.
- Resend: sending notifications and sign-in links by email, only when you ask for them.
If you sign in with Google, Google tells us your email address. What Google itself does with your data is covered by Google's privacy policy.
Ordering a printed program through Peecho is only available in the Dutch version of Ordofolio for now. The Dutch privacy policy describes how that works.
Your rights
You can ask us which data we have about you, and have it corrected or deleted. You can also object to processing or withdraw your consent. Email contact@ordofolio.com to do so. We reply within one month.
We can't see the content of your shared program or give it to you, because we don't have the key. That content is only on your own device and behind your own link.
If you don't agree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which oversees our company. If you live in another country of the European Union, you can also go to the authority in your country.
Changes
If we change anything in this policy, we update the date of this page. We announce big changes clearly on the website.
See also the terms of use and the publisher details.