Terms of Use for CelebrationBase

Effective as of July 2026

Please read these Terms of Use carefully before using the Web App. By accessing or using the Web App, you agree to these Terms of Use.

§ 1 Scope, User Roles, and Terms of Use

(1) These Terms of Use govern the use of the application CelebrationBase (hereinafter “Web App”). The term “Web App” covers all forms of provision and access channels, regardless of the device used, including, in particular, direct access as a website via a browser.

(2) The Provider of the Web App (hereinafter “Provider”) is:
Leonard Scholz
CelebrationBase
Wilhelmstraße 74
38100 Braunschweig
info@celebrationbase.com

(3) These Terms of Use apply to individuals who create and manage an Invitation (“Hosts”), as well as to individuals who access, view, or use the features of such an Invitation (“Guests”). Both groups are collectively referred to as “Users.” References to one gender include all genders and references to the singular include the plural and vice versa.

(4) Use is permitted exclusively for private, non-commercial purposes by natural persons acting as consumers within the meaning of Section 13 of the German Civil Code (BGB). Commercial use is expressly prohibited.

(5) Using the Web App does not require traditional registration involving the provision of personal data (e.g., real name, email address) or the creation of a permanent User account. Access to an Invitation is granted exclusively via a specifically generated Invitation link in combination with the corresponding authentication data (password). These Terms of Use become binding upon accessing the Web App and generating or using the Invitation link.

§ 2 Scope of Services, Free of Charge, and Availability

(1) The Web App enables Hosts to create and share digital Invitations. Guests can view this content and use interactive features (e.g., RSVPs, wishlist reservations). In these Terms of Use, a digital Invitation is collectively referred to as an “Invitation” regardless of its specific content (e.g., even if it consists solely of a wishlist).

(2) The Web App is provided completely free of charge. There is no guarantee of permanent or uninterrupted availability. The Provider may modify or discontinue the Web App at any time without providing a reason.

(3) Offline functionality: If supported by the browser, the Web App has an offline feature that stores data locally on the User’s device (browser storage). The Provider does not guarantee the permanent availability of this local data (e.g., in the event of automatic deletion of browser storage by the operating system).

(4) Support for using the platform is provided on a voluntary basis and free of charge. There is no entitlement to a specific availability of the contact form, individual technical support, or a guaranteed response time.

§ 3 Data Encryption and Storage Locations

(1) End-to-End Encryption: The personal content of the Invitations is transmitted and stored using end-to-end encryption on the cloud infrastructure used by the Provider. The Provider has no technical means to view, moderate, or manually correct this encrypted content, nor to recover the authentication data.

(2) Server Storage: In addition to the end-to-end-encrypted content, purely technical structural data (e.g., type and sequence of Invitation modules used) and metadata (such as internal IDs used for technical assignment) as well as the specified deletion date are stored on the server without end-to-end encryption to enable technical operations.

(3) Local Storage: In addition to the end-to-end-encrypted content, functional metadata (including assignment IDs) and the specified deletion date are stored locally in the browser’s storage without end-to-end encryption to enable technical operations such as the offline function.

(4) “Remember login credentials” convenience feature: If selected by the User during login, the cryptographic key required for automatic decryption is stored locally in the browser’s storage. The User bears sole responsibility for protecting this locally stored key from access by third parties.

(5) No Recovery in Case of Loss: Since the Provider cannot associate the Invitation links stored on the server with specific individuals and does not have access to the authentication data, the Provider cannot recover any data or lost Invitation links. Users are solely responsible for the secure safekeeping of their Invitation links and authentication data.

(6) Security of the client-side environment: The security of the end-to-end encryption depends significantly on the integrity of the device and browser used by the User. The User is responsible for keeping their authentication data strictly confidential and protecting their client-side environment from unauthorized access by third parties as well as from malware (e.g., keyloggers, spyware, or insecure or compromised browser extensions and add-ons). Risks and damages resulting from inadequate security of the User’s device or browser shall fall exclusively within the User’s scope of responsibility.

§ 4 Validity Period and Deletion of Invitations

(1) Each Invitation is assigned a deletion date, which the Host can manually adjust in the Invitation settings.

(2) Server Deletion: Upon reaching the specified deletion date, the data is immediately deleted from the Provider’s active production system. Data fragments may remain in standard internal system backups for up to 30 days before being permanently overwritten. The User has no right to selective restoration.

(3) Early Deletion: The Host may initiate the deletion of the Invitation at any time, manually and irrevocably, in the Invitation settings. Since the Invitation is end-to-end encrypted, this manual deletion requires that the Host possesses the authentication data for the Invitation.

(4) Exclusion of Support in Case of Data Loss: The User has no right to request manual deletion, disclosure, or identity verification from the Provider’s customer support in the event of a lost Invitation link or lost authentication data. Since the service is provided without registration, the Provider is technically unable to verify ownership of a specific Invitation.

(5) Local Deletion: For technical reasons, the automated deletion of Users’ local browser data does not take place until the next time the Web App is actively used after the specified deletion date has been reached. Users may manually clear their browser storage at any time.

§ 5 Responsibility for Content and Indemnification

(1) Each User is solely responsible for all content they create (e.g., text, images, links, communication via contact forms) and warrants that they will not infringe upon any third-party rights (e.g., copyrights, trademark rights, or personality rights) or violate applicable law.

(2) The Provider does not review, edit, or monitor the content or legality of data entered by Users. Automated technical validations (e.g., access permissions, compliance with system limits, or format checks) remain unaffected by this clause.

(3) Illegal, racist, offensive, fraudulent (e.g., phishing), or objectionable content is prohibited, as is the misuse of interactive features (e.g., mass blocking of wishlist entries, spam, commercial advertising).

(4) The User shall indemnify and hold the Provider harmless from and against any and all claims by third parties arising from the infringement of third-party rights by content created by the User, including reasonable legal defense costs.

§ 6 Reports, Suspension, and Deletion in Case of Violations

(1) Due to end-to-end encryption, the Provider does not proactively monitor content. Should content within an Invitation violate applicable law, third-party rights, or these Terms of Use, Users and third parties may report this via the contact form or by email, specifying the exact Invitation link of the Invitation concerned.

(2) Since content is end-to-end encrypted, reports of misuse must include concrete evidence (e.g., text copies, screenshots) to enable the Provider to investigate and take appropriate action.

(3) Partial Deletion: In the event of reasonable suspicion of violations of these Terms of Use or applicable law, the Provider is entitled, at its reasonable discretion, to delete individual structural elements (e.g., a text field) from the Invitation.

(4) Blocking: The Provider is entitled to temporarily or permanently block access to an entire Invitation if there is reasonable suspicion of violations of these Terms of Use or applicable law.

(5) Permanent Deletion: The Provider is entitled to immediately and completely delete an Invitation, including its content, upon actual knowledge of or strong suspicion of serious legal violations (e.g., fraud, phishing).

(6) The Provider shall not be liable for content that is erroneously blocked or deleted based on a reasonable suspicion.

§ 7 Limitation of Liability

Since this is a free Web App, the Provider’s liability is governed as follows:

(1) The Provider shall be liable without limitation only for intentional acts and gross negligence, as well as for damages resulting from injury to life, body, or health.

(2) The Provider’s liability for damages caused by slight negligence is excluded.

(3) Liability for damages resulting from system failures, data loss, technically caused transmission delays (latencies), faulty synchronizations, faulty automated link conversions, or other operational disruptions, as well as resulting planning errors on the part of Users, is excluded. Likewise excluded is any liability for security incidents, unauthorized data access, or data loss attributable to a compromise of the User’s device, security vulnerabilities in the browser used, the use of insecure browser extensions (add-ons), or insufficient safekeeping of the authentication data by the User. These exclusions do not apply if such damages are due to gross negligence or willful misconduct of the Provider.

(4) The provision of communication channels (contact form, email) and optional PGP encryption is provided on a voluntary (best-effort) basis. The Provider assumes no warranty for uninterrupted accessibility, error-free transmission, PGP incompatibilities, or an accidental unencrypted response to inquiries. The Provider shall only be liable for damages caused by technical loss, transmission errors, or delayed message delivery in cases of intent or gross negligence.

§ 8 Governing Law and Jurisdiction

(1) The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods. For consumers, this choice of law applies only to the extent that it does not deprive the consumer of the protection afforded by mandatory provisions of the consumer’s country of origin (principle of favorability).

(2) If the User is a merchant, does not have a general place of jurisdiction in Germany or the EU, or moves their place of residence abroad after the conclusion of the contract, the place of jurisdiction shall be the Provider’s registered office (Braunschweig, Germany).

§ 9 Consumer Dispute Resolution

There is no willingness or obligation to participate in dispute resolution proceedings before a consumer arbitration board.

§ 10 Final Provisions

Should any individual provisions of these Terms of Use be or become invalid or unenforceable, the validity of the remaining provisions shall remain unaffected.