Privacy

tablout is a seating chart editor that runs entirely inside your browser. There is no account, no server-side database, and no copy of your floor plan or guest list anywhere but on your own device, and in a find-your-seat link or a link to your plan if you choose to send one.

Last updated 21 October 2026

What is stored, and where

• Your floor plan, guest list and groups are saved in your browser's localStorage under tablout-storage. A few other keys can appear there: tablout-storage-backup, a recovery copy written only if the first becomes unreadable; tablout-poster-receipt, your unlock code, if you bought the print pack; tablout-checkout-intent, from when you leave for checkout, so the planner can reopen where you were (it deletes the key when your return from checkout uses it, or the next time it opens once an hour has passed); tablout-intent, your answer to the planner's question about what you are making; and tablout-exit-asked, so that a plan is asked at most once what stopped you when Download closes without the print pack, which it recognises by a few of its guests' internal id numbers, never by a name.
• The random group generator keeps the names you paste in the page itself, and they go when you close it. Seat these groups in the planner hands the groups to the planner through this tab's sessionStorage, under tablout.groups, and the planner deletes the key as soon as it reads it.
• That data stays on your device. It is not transmitted to us or to anyone else.
• Share with guests in Download makes a find-your-seat link. It holds each seated guest's name and table and your event's title, nothing else, packed into the part of the address after #, which a browser never sends to a server. It goes only where you send it, and anyone who has it can look up every name in it. The guest page reads the names on the guest's own phone, and its analytics are set to leave that part of the address out.
• Share this plan in More actions makes a link to your whole plan: your event's name (or, when it has none, the title in Design & event), the tables and where they stand, every guest's name, seat and group, the guests still to seat, every group in your list, even one nobody is in, and who is kept together (couples, plus-ones and your sit-together rules), plus each guest's diet only if you tick the box for the caterer. Not your keep-apart rules, the rest of Design & event, or the print settings. It is packed into the part of the address after # in the same way, so it goes only where you send it, and anyone who has it can read every name in it. The page that opens it shows the plan in that person's own browser, and its analytics are set to leave that part of the address out. Its Open a copy to edit hands the plan to the planner through that tab's sessionStorage, under tablout.plan, and the planner deletes the key as soon as it reads it.
• Save Project writes a .tablout.json file to your own downloads folder. The exports (the guest and table lists, the floor plan, and the print pack's poster, cards and sheets) are saved or printed the same way. All of them are produced in your browser; none is uploaded.

What we do not do

• No user accounts, sign-up, or email collection.
• No cookies, and no cross-site tracking of any kind.
• No advertising, and no selling or sharing of data. There is nothing to sell.
• No server-side storage of your seating plans or guest names.

Third parties

• Hosting. The site is served by Vercel, which processes standard request data (IP address, user agent, requested URL) to deliver the page and protect the service. See Vercel's privacy policy.
• Analytics. Page views and product events are counted by Umami Cloud, which is cookieless and sets no advertising identifier. The events record actions in the planner, not their content: for example that it was opened or left, the view switched or the next-step button pressed, a guest seated or moved by hand, a table added, moved or changed, guests added, some of them as a couple or with a plus-one, a partner moved along with a guest, two guests unlinked, the guest list searched, auto-seat run, a rule added or removed, a file looked at in the Download window or one of its settings changed, a file exported, the print pack dialog opened, checkout clicked, your answer when Download asks what stopped you, groups made on the group generator, a find-your-seat link shared or a name found with it, a link to a plan shared, or an error. Each carries at most two properties, and they are fixed choices or coarse ranges: a table shape; an export format; whether a file was free or from the print pack; which button opened the print pack dialog; whether anyone was seated yet when it opened; which of that question's six answers you picked, or that you closed it unanswered; whether guests were added as a couple or with a plus-one; which view, control, file or setting was used, and how a guest was seated, named from a fixed list, never what was typed or chosen in it, so not what you searched for, your event's name, its title, date or venue, or a colour or size you picked; where an error happened, as the planner, the site or one of the app's own dialogs, named from a fixed list; a guest count, or the group generator's count of names and of rules, rounded into a range rather than the exact number. The one exception is an error's message, which has anything quoted in it removed before it is sent. No guest name, group or table label is ever sent, and no name pasted into the group generator, because the whole point of this app is that your guest list stays with you. Umami Cloud runs servers in the EU and the US. See Umami's privacy policy.
• Payments. The print pack is sold through Stripe, which acts as the seller of record. If you buy, Stripe receives your payment details and billing country directly. We never see your card details. Your guest list is not part of the purchase and is never sent to Stripe. See Stripe's privacy policy.
• Fonts. The typefaces are served from tablout.com itself, so loading a page makes no request to any font service.
• Feedback email. Send feedback opens a draft in your own mail client, addressed to support@tablout.com. Nothing leaves your device until you send it, and nothing from your plan is attached — what you type is all we receive. The mailbox is hosted by the domain's mail provider, not by this app.

Your data, your control

Because everything is local, you are in full control. Clear site data for tablout.com in your browser settings and every copy on this device is gone. A find-your-seat link or a link to your plan that you have already sent still holds its names wherever you sent it (in messages, on a wedding website, in a guest's browser history), and only removing it there takes them away. A copy someone opened from a link to your plan is in their browser, and is theirs. Reset All in the app empties the plan but can leave a recovery copy behind. We cannot recover a plan for you, because we never had it. If you bought the print pack, clearing site data also removes the unlock, so copy the unlock code shown on the print pack card in Download after payment, and you can re-enter it on any device.

Contact

Questions about this page or the app: see the contact page. For anything about a payment, use the link on your Stripe receipt.