Privacy Policy

This policy applies to all users of mybdaystar.com. Our service is intended for adults (18+) who are parents or guardians creating birthday bundles for their children. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided us with personal information without parental consent, please contact us immediately.

Information you provide:

• Email address (when signing in)
• Child's name, age, and gender (for bundle generation)
• Party details: date, time, location
• Payment information (processed by PayPal — we never see or store your card details)
• Guest information submitted through the RSVP page

Information collected automatically:

• IP address (collected at the time of payment for fraud prevention and dispute resolution)
• Browser type and device information
• Usage data (which pages you visit, when you log in)

Your child's photo:
Your child's photo is processed in memory only during bundle generation. It passes directly from your browser to our AI system (Google Gemini) and is deleted immediately after your bundle is created. It is never written to our database, never stored in our file storage, and never retained in any form after generation is complete.

We use your information to:

• Create and deliver your personalized bundle
• Send you your bundle delivery email
• Allow you to access your Dashboard and download your files
• Respond to your support requests
• Prevent fraud and resolve payment disputes
• Improve our service

We do not use your information for advertising. We do not sell your data to third parties.

We share your information with trusted third-party service providers solely to operate our service. These providers assist with payment processing, file storage, email delivery, AI content generation, and website hosting. We do not sell your personal information to any third party.

Your child's photo is processed by an AI content generation service solely to create your bundle. It is not retained by that service after generation is complete.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data

To exercise any of these rights, contact us at support@mybdaystar.com. We will respond within 30 days.

California residents (CCPA): You have the right to know what personal information we collect, to delete it, and to opt out of its sale. We do not sell personal information.

We use essential cookies to keep you signed in and to maintain your session. We do not use advertising or tracking cookies. We do not use third-party analytics that track you across other websites.

We use industry-standard security measures including HTTPS encryption for all data transmission, secure storage through Cloudinary, and access controls limiting who can access user data. No system is 100% secure, but we take reasonable precautions to protect your information.

Our service is directed at adults — parents and guardians — not at children. We do not knowingly collect personal information from children under 13. The child's photo uploaded by a parent is processed and immediately deleted as described above. If you are a parent and believe we have collected information from your child directly, contact us at support@mybdaystar.com.

MyBday Star primarily serves users in the United States. By using our service, you consent to the transfer of your information to our service providers, which may be located in various countries.

We may update this Privacy Policy from time to time. We will post the updated policy with a new "Last Updated" date. Continued use of our service after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy, contact us at:

support@mybdaystar.com