Privacy Policy
Last updated: January 28, 2026
1. Information We Collect
We collect information you provide directly and information collected automatically:
Information You Provide
- Account information (email address, name) when you create an account
- Content you upload (photos, text, videos for your reveal experience)
- Video reactions recorded by viewers (with their consent)
- Messages and communications you send us
- Payment information (processed securely by Stripe; we do not store full card details)
Information Collected Automatically
- Device information (browser type, operating system, device type)
- Usage data (pages visited, features used, time spent)
- IP address and approximate location
- Analytics data to improve our Service
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent fraudulent transactions and abuse
- Personalize and improve your experience
4. Data Storage and Security
We use industry-standard security measures to protect your data, including encryption in transit (HTTPS) and at rest. Your data is stored on secure servers provided by reputable cloud providers.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.
5. Data Retention
- Active Experiences: We retain your experience data as long as your experience is active (based on your tier's hosting period: 30 days for Free, 90 days for Standard, or indefinitely for Forever tier).
- Expired/Deleted Experiences: When an experience expires or is deleted, we delete all associated content — including video reactions, thumbnails, uploaded media, and database records — from our servers and cloud storage within 30 days.
- Account Data: We retain your account information as long as your account is active. If you request account deletion, we will delete your data within 30 days.
- Legal Requirements: We may retain certain information as required by law or for legitimate business purposes (fraud prevention, legal compliance).
6. Your Rights
Depending on your location, you may have the following rights:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Export your data in a portable format
- Opt out of marketing communications
- Object to certain processing of your data
To exercise these rights, contact us at support@genderreveal.day. We will respond to your request within 30 days.
8. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Contractual necessity: Account data, experience content, and payment processing — required to provide the Service you requested.
- Consent: Video reactions, non-essential cookies, and marketing communications — you may withdraw consent at any time.
- Legitimate interest: Analytics, fraud prevention, browser fingerprinting for view limits, and service improvement — balanced against your privacy rights.
- Legal obligation: Data retained for tax, accounting, or regulatory compliance.
9. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. Shared experience links are intended for recipients aged 13 and older. If we learn we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@genderreveal.day.
10. California Privacy Rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA/CPRA):
- Right to know what personal information we collect, use, and disclose about you
- Right to request deletion of your personal information
- Right to opt out of the sale or sharing of your personal information. We do not sell your personal information.
- Right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at support@genderreveal.day. We will verify your identity before processing your request and respond within 45 days.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States. When we transfer data from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms. Our primary service providers (Cloudflare, Stripe) maintain their own SCCs and data protection commitments.
12. Data Processing Agreement
If you are an experience creator subject to GDPR or similar data protection laws, you may act as a data controller for viewer data collected through your experience (such as video reactions and guestbook messages). In this context, Aguirre Labs LLC acts as a data processor. A Data Processing Agreement (DPA) is available upon request by contacting support@genderreveal.day.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
We encourage you to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.
14. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Email: support@genderreveal.day
Data Protection: For data protection inquiries, you may also contact our data protection representative at the same email address.