Privacy Policy

My Baby Shower is a web application that allows users to create and share personalised baby shower registries with their guests. The service is operated by [Your Company Name], registered in [Country].

By using My Baby Shower you agree to the data practices described in this policy. If you have any questions, please contact us at the address in Section 10.

We collect the following categories of data:

• Account information: Your email address and password (stored securely via Firebase Authentication). Passwords are never stored in plain text — they are hashed by Firebase before storage.
• Registry content: Names, dates, product links, images, and story text that you voluntarily add to your registry.
• Guest data: First and last names submitted by guests when they RSVP, and any guess-game entries they submit.
• Usage data: Standard web analytics (page views, session duration) collected via Vercel Analytics. No personally identifiable information is included in analytics data.

We use the information we collect to:

• Operate and display your registry to invited guests.
• Authenticate your account and keep it secure.
• Send transactional emails if you request a password reset.
• Improve the reliability and performance of the service through anonymised analytics.

We do not sell, rent, or share your data with third parties for marketing purposes — ever.

All registry data is stored in Google Firebase Firestore, a SOC 2-compliant cloud database. Data is encrypted at rest and in transit using industry-standard TLS encryption.

Firebase Authentication handles all credential management. We do not have access to your password in any form.

While we implement reasonable security measures, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account.

We use only essential session cookies required for Firebase Authentication to keep you signed in. No third-party advertising or tracking cookies are used.

Vercel Analytics, our analytics provider, uses privacy-friendly, cookie-free analytics. It collects no personally identifiable information and is fully compliant with GDPR and CCPA.

Guest names collected via RSVP and guess-game submissions are stored solely to help the registry owner manage their event. This data is associated with the registry owner's Firestore document and is not shared with any third party.

Guests may request deletion of their data by contacting the registry owner directly, or by emailing us at support@mybabyshower.app. We will action all valid deletion requests within 30 days.

Depending on your location you may have the right to access, correct, or delete the personal data we hold about you. You can:

• Delete your account and all associated registry data at any time using the "Clear All Data" option in your dashboard settings.
• Request a copy of the personal data we hold about you by emailing us.
• Request correction of any inaccurate personal data.
• Object to or restrict certain types of processing.

To exercise any of these rights, contact us at support@mybabyshower.app.

Our service is intended for use by adults aged 18 and over. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify registered users of material changes by email.

Continued use of the service after changes are posted constitutes your acceptance of the updated policy. The “Last updated” date at the top of this page indicates when the most recent revision was made.

For any privacy-related questions, requests, or concerns, please reach out to us: