Legal
Privacy Policy
Last updated: June 15, 2026
What we collect
- Account data — email, display name, avatar.
- Celebration data — names, occasions, messages, photos, reveal dates and invitation details.
- Usage data — pages viewed, clicks, device and browser info.
- Payment data — handled by our payment processor; we don't store full card numbers.
How we use it
To run Worthtag: authenticate you, create private celebrations, collect memories, send invitations and reminders, reveal keepsakes, prevent abuse, and improve the product. We don't sell your personal data.
Memory privacy
Unrevealed memories are kept private from the person being celebrated. Invitation links contain a private code, and organizers control what appears in the final reveal.
Sharing
Limited sharing with infrastructure providers (hosting, database, email, payments, analytics) under contract. We may disclose data if required by law.
Cookies
We use essential cookies for sign-in and a small set of analytics cookies to understand usage. You can clear cookies in your browser at any time.
Retention
We keep account and celebration data while your account is active. Delete your account and we'll remove personal data within 30 days, except where retention is legally required.
Your rights
Depending on your region (GDPR, CCPA, PIPEDA), you may have rights to access, correct, export, or delete your data. Email privacy@worthtag.com to exercise them.
Security
Data is encrypted in transit and at rest. We use row-level security so users can't read or modify each other's data. No system is perfectly secure — report concerns to security@worthtag.com.
Children
Worthtag isn't intended for users under 16.
Changes
We'll post updates here and announce material changes in-app.
