Privacy policy

Last updated October 23, 2026

Who we are

Birfy is run by Birfy LLC. Questions about privacy go to team@birfy.com.

What we collect

From parents who create a party

• Your email address, to sign you in with a one-time link and let you manage your parties.
• Your display name, which guests see as the host.
• Party details: your child's first name and age, the date, time, venue and address, your note to guests, the design you pick and, if you add them, a photo of your child and your own background picture.
• Gift settings: wishlist items and links, and Venmo or Zelle details if you choose to show them.
• Your party checklist.

From co-hosts

• A host can invite other adults to help manage a party. We store the email address the host enters and the access level they choose. We use that email only to send the invite and to recognize the co-host when they sign in. Co-hosts sign in the same way as hosts, with their own email.

From guests who reply

• Your name and your child's name, whether you're coming, and how many kids and adults.
• An optional note for the host.
• Your email address (required when you say yes, optional otherwise), used only to send you a 6-digit code if you want to change your reply from another device.
• An optional mobile number, shown only to the host and co-hosts so they can reach you. We don't send texts.
• Which wishlist gift you reserved, if any.
• Party photos you add, if any. Your name isn't attached to them; we link them only to your device so you can remove your own and so each guest can add up to 20. Photos are shrunk and re-saved on your phone before upload, which removes location and camera details.

Guests don't need an account, and we don't ask for anything else.

Collected automatically

• Cookies: a sign-in cookie for parents, and a cookie that lets a guest's phone remember their reply, and Google advertising cookies (see Advertising below).
• Spam protection: to stop bots, we use a bot-check service and count requests per connection. We store those counts under a one-way scrambled form of your IP address, never the address itself, and clear them within a day.
• Usage and error data: which pages and steps are used (for example, how many parents finish creating a party) and details of any errors, so we can fix problems. This uses a random ID stored in your browser only until you close the tab. Parents who sign in are linked by an internal account number. We never send names, emails, children's details or party links, and we don't record your screen.
• Basic server logs kept by our hosting provider for security and troubleshooting.

Who can see what

• Anyone with the party link can see the party page: the title, date, time, venue and address, the host's note, the child's photo if one was added and the background picture if the host uploaded one. Share the link only with people you're inviting. Party pages are hidden from search engines.
• Guests may see how many friends are going and their initials, if the host turns that on. After replying yes, they can see the wishlist and which gifts are already taken, but not who took them.
• Party photos: guests' photos are shown to other guests only after the host approves them. The host and co-hosts see every photo added and can download them, but not who added which. Anyone with the party link can see approved photos until 30 days after the party.
• The host and any co-hosts they invite see every reply, including notes, contact details and who reserved each gift. The host also sees their co-hosts' email addresses. Guests don't see co-hosts.
• Birfy staff can access data only to run the service, answer support requests or keep it safe.

Children's privacy

Birfy is for parents and other adults. It isn't meant for children, and children shouldn't create parties or reply to them. The child's name, age and photo on a party page are added by their parent, who chooses whether to include a photo and can remove it at any time. If you believe a child has given us information, email team@birfy.com and we will delete it.

Money and gifts

Birfy never handles payments. If a host shows a Venmo or Zelle handle, any money goes directly from the guest to the host through those services, under their own privacy policies. Wishlist links take you to the store's own website.

Companies that help us run Birfy

We share data only with service providers that run parts of Birfy for us, such as website hosting, database and photo storage, email delivery, bot protection, and product analytics and error monitoring, under contracts that limit how they can use it.

We don't sell personal information. We may disclose information if the law requires it or to protect people from harm.

Advertising: our homepage and Party Ideas articles load Google's ad tag, which lets us measure our Google ads and show Birfy ads to people who have visited Birfy. Google may set cookies and collect device and browsing information under its own privacy policy. The tag is not loaded on party pages or anywhere parents and guests enter details, so Google never sees names, children's details or party links. You can turn off personalized ads at adssettings.google.com.

Gift idea links: some wishlist items come from Birfy's gift ideas and link to stores through affiliate programs. When you follow one, the store and its affiliate network may set their own cookies to credit Birfy for a purchase, under their own privacy policies. We don't send them your name or any party details.

How long we keep it

• Party details stay until the host deletes the party or their account.
• Co-host invites expire after 7 days. They're deleted when accepted, declined or cancelled, and expired invites are deleted 30 days after they expire. A co-host keeps access until the host removes them, they leave, or the party is deleted.
• Guest details: 90 days after the party, we automatically remove guests' names, notes, contact details and device links. Only the counts (how many said yes or no) remain for the host.
• Party photos: guests can add photos until 7 days after the party and see them until 30 days after. The host keeps them for a year after the party; we email them two weeks before the photos are deleted. Guests can remove their own photos while the album is open, and hosts can delete any photo at any time.
• 6-digit codes expire after 10 minutes and are deleted within a day.
• Spam-protection counts are deleted within a day.

Your choices

• Hosts can edit or delete a party, or delete their whole account, from Account. Deleting removes the party page, replies, wishlist, checklist and photos.
• Co-hosts can leave a party at any time, and hosts can remove a co-host or cancel an invite.
• Guests can change or remove their reply from the party page, or ask the host to remove it. They can remove photos they added from the album page on the same phone, or ask the host to delete them.
• Anyone can ask to see, correct or delete their information by emailing team@birfy.com. Depending on where you live (for example California), you may have additional rights under local law, and we will honor them.

Security

Data is encrypted in transit. Photos are stored privately and shown through links that expire. Access to the database is restricted so each parent can reach only the parties they made or were invited to co-host. No system is perfectly secure, so please don't put anything on a party page you wouldn't want invited guests to see.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use information you've already given us, we'll email hosts before it takes effect.