Privacy policy

Data controller

NOGS, a SAS with share capital of 1 000 €, 436 chemin de l'Écluse, 06580 Pégomas, France, RCS Grasse 943 171 967. Contact: bonjour@gender-reveal.app.

Data processed and purposes

Hosts: email address, the first names shown on the event, the chosen language, any photo added to the welcome screen, and payment data processed directly by Stripe (we never see or store your card number). Purposes: providing the service bought, sending the access link and the receipt, and providing support. Legal basis: performance of the contract.

Guests: the vote (girl or boy), and if they wish a name guess and a short message, together with a technical device identifier used solely to enforce the one vote per device rule. No account is created and no email address is asked for. Purposes: running the live vote and building the host's keepsake book. Legal basis: the host's legitimate interest and the contract between us and them.

Recipients and processors

Data is neither sold nor rented. It is processed by our technical subprocessors, each for its own function: Vercel (hosting of the site and the photos), Neon (database, hosted in Frankfurt in the European Union), Stripe (payment), Resend (sending transactional emails). Some of these providers are established in the United States: transfers are covered by the European Commission's standard contractual clauses and, where applicable, by the EU-US Data Privacy Framework. Four further recipients, none of which sees anything of your party's content: Vercel Web Analytics, to count visits with no cookie and no lasting identifier, then our three advertising networks, Meta Platforms, TikTok and Pinterest, to which our server reports, at three moments of the purchase journey, the advertising click identifier that the network itself placed, then the amount, the currency and your hashed email once an order exists. Each one receives only its own click identifier, never another's. Those transmissions happen for visitors outside the European Union, the European Economic Area, the United Kingdom and Switzerland only. See the cookie policy for the detail and for the Global Privacy Control signal.

Retention periods

Event pages, votes, name guesses, messages and photos are kept for 12 months after purchase, then deleted. Billing data is kept for 10 years as the law requires. Technical logs are kept for 12 months at most. The advertising click identifier, where there is one, is kept for 7 days on your device; the copy attached to an order follows that order's retention period.

Your rights

You have the rights of access, rectification, erasure, portability, restriction and objection over your data. A guest may ask for their vote and their message to be deleted, either directly from the host (who has the tool in their space) or by writing to us. To exercise your rights: bonjour@gender-reveal.app. You may also lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr). For UK residents, the same guarantees apply under the UK GDPR, with a complaint possible to the ICO.