Privacy Policy
Effective date: April 22, 2026
At Bubbles ("we," "our," or "us"), your privacy matters. This Privacy Policy explains what information we collect when you use blowbubbles.co (the "Service"), how we use it, and how we protect it. By using the Service you agree to the practices described here.
1. Information We Collect
Information you provide
- Account information — name, email address, and password when you sign up
- Profile information — any optional details you add to your profile
- User content — photos, videos, comments, and other media you upload
- Payment information — billing details processed securely by Stripe; we do not store full card numbers
- Communications — messages you send us via the contact form or email
Information collected automatically
- Log data — IP address, browser type, pages visited, and timestamps
- Device information — device type, operating system, and browser version
- Cookies and similar technologies — session cookies required to keep you signed in
Information from third parties
If you sign in with Google, we receive your name, email address, and profile picture from Google as permitted by your Google account settings.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service
- Create and manage your account
- Process payments and send receipts
- Send transactional emails (event invitations, upload confirmations, password resets)
- Respond to your support requests
- Monitor for security issues and prevent abuse
- Comply with legal obligations
We do not sell your personal information or use it to serve third-party advertisements.
3. How We Share Your Information
We may share your information only in these limited circumstances:
- Service providers — trusted vendors who help us operate the Service (e.g., Stripe for payments, AWS for storage, Google for authentication). They are contractually required to protect your data and may not use it for their own purposes.
- Other event participants — your name and any content you upload within an event gallery is visible to other invited guests of that event.
- Legal requirements — if required by law, court order, or government authority, or to protect the rights and safety of our users.
- Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
4. Cookies
We use essential session cookies to keep you logged in and to protect against cross-site request forgery. We do not use tracking or advertising cookies. You can configure your browser to refuse cookies, but doing so may prevent some features of the Service from working correctly.
5. Data Retention
We retain your account information and content for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons. Aggregated, anonymized data may be retained indefinitely.
6. Data Security
We use industry-standard security measures including HTTPS encryption, secure credential storage, and access controls to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We will notify you promptly in the event of a data breach that affects your personal information.
7. Your Rights and Choices
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — update inaccurate or incomplete information from your account settings
- Deletion — delete your account and associated data at any time
- Portability — request an export of your uploaded content
- Opt-out — unsubscribe from non-transactional emails at any time
To exercise any of these rights, contact us at [email protected].
8. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
9. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by posting the revised policy with an updated effective date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your data, please reach out at [email protected].