Privacy Policy

What we collect

Information you provide: Email address (used to verify your purchase and deliver access) and payment information (processed securely by Stripe; we never see or store your full card number).

Information collected automatically: Browser type, device type, and general location data via Google Analytics (GA4). Pages visited and interactions with our site.

How we use your information

We use the information we collect to process your purchase and verify your access to purchased reports, send purchase confirmations and communicate about your order, analyze site usage to improve our product, and comply with legal obligations. We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Cookies

We set a functional httpOnly cookie (br_access) when you complete a purchase. This cookie has a maximum age of one year and stores a verification token that confirms your access to purchased reports. This cookie is required for the service to function.

We use Google Analytics 4 (measurement ID: G-9C0JXSY8KH) to understand how visitors use our site. GA4 may set its own cookies for analytics purposes. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

Third-party services

• Stripe processes payments. Their privacy policy applies to payment data.
• Google Analytics collects anonymized usage data to help us improve the site.
• Railway hosts our application. Their infrastructure handles request data.

Your rights

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal information. To exercise these rights, contact hello@birthdayreports.com. We will respond within 30 days.

California Residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information.

Data retention

We retain your email address and purchase record for as long as your access cookie is valid (up to one year), or longer if required by law or for legitimate business purposes such as fraud prevention or financial record-keeping. You may request deletion of your data at any time.

Data security

We use commercially reasonable measures to protect your information, including encrypted connections (HTTPS), secure cookie configuration, and trusted third-party processors. In the event of a data breach affecting your personal information, we will notify affected users via email within 72 hours of discovery.

Contact

For privacy-related questions, contact us at hello@birthdayreports.com.