Privacy Policy

This policy explains what Birthday Catalog collects, why we collect it, and what you can do about it. We keep the list short on purpose - we only collect what the site needs to work.

Information We Collect

Information you give us

• Account details. If you create an account, we store your email address, your name, and your profile image. You can sign in either with a magic link sent to your email or with Google - if you use Google, we receive your name, email address, and profile picture from them.
• Freebie submissions. If you submit a birthday freebie, we store the listing details you provide and associate them with your account.
• Advertiser details. If you buy advertising, we store the contact name, email address, website URL, and creative assets you provide for the campaign.
• Messages. If you email us, we keep that correspondence so we can respond and follow up.

Information collected automatically

• Analytics. We use Vercel Analytics to understand which pages are popular. It is privacy-friendly by design: it does not use cookies and does not build a cross-site profile of you.
• Server logs. Our hosting provider records standard request data such as IP address, browser type, and the page requested. This is used for security and debugging.

Information that never reaches us

Your birthday list is stored entirely in your own browser using local storage. It is never transmitted to our servers, we cannot see it, and clearing your browser data will erase it.

Cookies

We use cookies only where they are necessary for the site to function. If you sign in, we set a session cookie so you stay signed in between pages - without it, you would be logged out on every click. We also store your light or dark theme preference. We do not use advertising or cross-site tracking cookies, so there is no consent banner to dismiss.

How We Use Your Information

• To create and maintain your account, and to sign you in
• To publish and manage freebie listings you submit
• To process advertising purchases and run purchased campaigns
• To send transactional email - magic links, and updates about submissions or campaigns
• To understand aggregate traffic patterns and improve the site
• To detect abuse, prevent fraud, and keep the site secure

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

Service Providers

We rely on a small number of vendors to operate Birthday Catalog. Each receives only the data needed for its function:

• Vercel - hosting and analytics
• Google - optional sign-in, if you choose it
• Resend - delivery of transactional email
• Stripe - payment processing for advertising. Card details go directly to Stripe and are never stored on our servers.

Data Retention

We keep account data for as long as your account is open. If you ask us to delete your account, we remove your personal data within 30 days, except where we are required to keep records - for example, payment records retained for tax and accounting purposes. Server logs are retained on a short rolling window by our hosting provider.

Your Rights (EU and UK)

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access your data, correct it, delete it, receive a portable copy, restrict how we use it, and object to processing. To exercise any of these, email us at hello@birthdaycatalog.com.

Our legal bases for processing are:

• Contract - operating your account, publishing your submissions, and delivering advertising you have purchased
• Legitimate interests - aggregate analytics, security, and abuse prevention
• Legal obligation - retaining financial records

You also have the right to lodge a complaint with your local data protection authority.

Your Rights (California)

If you are a California resident, the CCPA and CPRA give you the right to know what personal information we have collected about you, to request its deletion, to correct inaccurate information, and to be free from discrimination for exercising those rights.

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve months. To make a request, email us at hello@birthdaycatalog.com.

Children

Birthday Catalog is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Third-Party Sites

Our listings link to restaurants, retailers, and brands we do not control. Once you follow a link, that company's privacy policy governs what happens to your data - including any birthday club you sign up for. We encourage you to read their terms before handing over your date of birth.

Changes to This Policy

We may update this policy from time to time. When we make a material change, we will update the date below. Continued use of the site after a change constitutes acceptance of the revised policy.

Contact

Questions about this policy, or about your data, can be sent to hello@birthdaycatalog.com.

Last Updated: August 21, 2026