Draft — this policy is pending legal review and may change before launch.

Privacy Policy

Effective September 28, 2026

1. Who we are

The Birthday Club (“we”, “us”) operates thebirthday.club, a place to find birthday rewards, plan celebrations, keep birthday wish lists, and send gifts. This policy explains what we collect, how we use it, and the choices you have.

2. Information we collect

  • Account details. When you sign in with Google, Facebook, or email we receive your name, email address, and (for Google or Facebook) your profile photo.
  • Things you give us. Your birthday, wish list gifts, celebration plans, party or booking requests, and messages you send us or a merchant. If you upload a photo for your wish list page, we store a resized copy and remove its location and camera details.
  • People you invite. When you invite someone to your wish list, you give us their name, email address, or mobile number. We use these only to send that invite and, if they choose to receive them, updates about your list. We never sell them or use them for marketing. They can opt out at any time.
  • Usage data. Pages viewed, links clicked, device and browser type, and approximate location derived from your IP address, collected with cookies and Google Analytics.

3. How we use it

  • To run your account and show you relevant birthday offers.
  • To deliver requests you make — for example, sending a party inquiry to a venue.
  • To understand how the site is used and improve it.
  • To keep the service secure and prevent abuse.
  • To comply with law.

4. How we share it

We do not sell your personal information. We share it only:

  • With service providers that run the site for us — hosting (Vercel), database (Neon), sign-in (Google, Meta), email delivery (Resend), text messages (Twilio), analytics (Google Analytics), and maps (Google Maps Platform).
  • With a merchant when you ask us to — for example, when you join their birthday club or send them a request.
  • When required by law, or to protect our rights and users’ safety.

5. Third-party sites and affiliate links

Offers link to merchants’ own websites and sign-up pages, which have their own privacy policies. Some links are affiliate links: if you make a purchase we may earn a commission, and the merchant may learn that you arrived from us.

6. Cookies

We use cookies to keep you signed in and to measure site usage. When you open a shared wish list, a cookie with a random ID lets us count unique visitors. It isn’t linked to your name or email, and list owners see only a total. You can block or delete cookies in your browser settings; some features, like staying signed in, will stop working. To opt out of Google Analytics on every site, install the Google Analytics opt-out add-on.

Browsers can send a “Do Not Track” signal. There is no common standard for responding to it, so we do not currently change how we collect data when we receive one.

7. Children

The site is not directed to children under 13, and children under 13 may not create an account. A parent or guardian may create and manage a wish list for their child; the parent controls what is shared and with whom. If you believe a child under 13 has given us personal information, contact us at support@thebirthday.club and we will delete it.

8. Retention and security

We keep your information while your account is active and as needed to provide the service or meet legal obligations, then delete or de-identify it. We use reasonable safeguards, but no system is completely secure.

9. Your choices

You can ask us to access, correct, or export your personal information by emailing support@thebirthday.club. Depending on where you live you may have additional rights under local law, and we will honor them.

10. Deleting your data

To delete your account and the personal information tied to it:

  • Sign in and go to Settings → Delete account. Your wish lists and gifts are deleted right away, and any share links stop working.
  • Or email support@thebirthday.club from the address on your account with the subject “Delete my data”. We will confirm the request and delete your information within 30 days.
  • We may keep information we must retain to meet legal obligations, and deleted data can remain in encrypted backups for a limited time before it is overwritten.
  • If you signed in with Facebook or Google, you can also remove The Birthday Club from the connected apps in that account’s settings.

11. Changes and contact

We will post any changes here and update the effective date. Questions? Email support@thebirthday.club.