Legal

Privacy Policy

Last updated: June 15, 2026

What we collect

  • Account data — email, display name, avatar.
  • Celebration data — names, occasions, messages, photos, reveal dates and invitation details.
  • Usage data — pages viewed, clicks, device and browser info.
  • Payment data — handled by our payment processor; we don't store full card numbers.

How we use it

To run Worthtag: authenticate you, create private celebrations, collect memories, send invitations and reminders, reveal keepsakes, prevent abuse, and improve the product. We don't sell your personal data.

Memory privacy

Unrevealed memories are kept private from the person being celebrated. Invitation links contain a private code, and organizers control what appears in the final reveal.

Sharing

Limited sharing with infrastructure providers (hosting, database, email, payments, analytics) under contract. We may disclose data if required by law.

Cookies

We use essential cookies for sign-in and a small set of analytics cookies to understand usage. You can clear cookies in your browser at any time.

Retention

We keep account and celebration data while your account is active. Delete your account and we'll remove personal data within 30 days, except where retention is legally required.

Your rights

Depending on your region (GDPR, CCPA, PIPEDA), you may have rights to access, correct, export, or delete your data. Email privacy@worthtag.com to exercise them.

Security

Data is encrypted in transit and at rest. We use row-level security so users can't read or modify each other's data. No system is perfectly secure — report concerns to security@worthtag.com.

Children

Worthtag isn't intended for users under 16.

Changes

We'll post updates here and announce material changes in-app.