Privacy Policy
Last updated: January 29, 2026
1. Introduction
Welcome to CelebrateThisMortal ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at celebratethismortal.com and use our services to create digital celebration cards.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you create an account or sign in with Google, we collect your email address and name.
- Card Content: Messages, photos, audio recordings, GIFs, and other content you add to celebration cards.
- Recipient Information: Names, display names, and optional birthday information for card recipients.
- Payment Information: When you purchase premium templates, payment is processed securely through Stripe. We store transaction records but do not store your full credit card details.
2.2 Information Collected Automatically
- Device Information: Browser type, operating system, and device identifiers.
- Usage Data: Pages visited, features used, and interaction patterns through Vercel Analytics and Simple Analytics.
- Cookies and Session Data: We use essential cookies required for authentication and session management. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for more details.
3. How We Use Your Information
3.1 Legal Basis for Processing
We process your personal information based on:
- Your consent (e.g., creating an account, submitting card content)
- Performance of a contract (providing paid and free services)
- Legitimate interests (improving and securing our platform)
- Legal obligations (e.g., tax and accounting requirements)
3.2 Purposes
- To provide and maintain our celebration card service
- To process payments and send transaction confirmations
- To enable card sharing and collaboration features
- To improve our services and develop new features
- To detect and prevent fraud or abuse
- To respond to your inquiries and support requests
- To send service-related communications
4. Third-Party Services
We integrate with the following third-party services:
- Amazon Web Services (AWS): We use DynamoDB for data storage and S3 for file storage (images, audio files).
- Google: For authentication via Google Sign-In.
- Stripe: For secure payment processing.
- Spotify: To embed playlists in cards (we only access playlists with public visibility).
- GIPHY: To allow GIF search and embedding in cards.
- Sentry: For error monitoring and performance tracking.
- Vercel: For hosting, analytics, and speed insights.
- Simple Analytics: For privacy-focused website analytics.
Each of these services has their own privacy policies governing the data they collect.
5. Data Storage and Security
Your data is stored securely using Amazon Web Services (AWS) infrastructure. We implement appropriate technical and organizational measures to protect your personal information, including:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication mechanisms
- Regular security assessments
- Access controls and authentication for data access
6. Data Sharing
We do not sell your personal information. We may share your information:
- With service providers who help us operate our platform, under confidentiality and data processing agreements
- When required by law or to respond to legal processes
- To protect our rights, privacy, safety, or property
- With other users as part of the card-sharing functionality (e.g., when you contribute to a group card)
7. Your Rights and Choices
You have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate personal data
- Request deletion of your personal data
- Withdraw consent for data processing
We do not send promotional marketing emails unless you explicitly opt in.
To exercise these rights, please contact us at christina@celebratethismortal.com.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. Card data is retained until you delete it or request account deletion. We may retain certain information as required by law or for legitimate business purposes, such as transaction records retained for tax, accounting, or legal compliance.
9. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy. Such safeguards may include standard contractual clauses or equivalent legal mechanisms.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.